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1. Executive Summary 





The term blockchain, more specifically Distributed Ledger 
Technologies (DLT), identifies the set of solutions that allow you to 
safely validate and record an update of the status of a shared and 
distributed register between the nodes of a computer network . In the 
short history of this technology, the last two years have shown a 
significant acceleration in the dynamics of adoption and development, 


as evidenced by some particularly relevant indicators. As an example: 


e venture capital investments in companies active in blockchain 
technology went from 1.6 billion dollars in the 2015-2016 period to 
27.3 billion dollars in the 2017-2018 period +; 


* patent applications related to blockchain went from 648 to 1441 in 


the same period. 


This dynamic has helped to bring the issue out of the more strictly 
specialized areas, bringing it to the attention not only of companies but 
also of public institutions, which have perceived its potential as an 
enabling element for the construction of completely new business 


models. 


In particular, the possibility of managing transaction logs distributed 
between different subjects, whose 
integrity and consistency are guaranteed by cryptographic protection 
and distributed consent mechanisms and the possibility of automating 
transactional operations by means of specific procedures (Smart 
Contracts) can substantially affect the way companies build their 


relationships: a real paradigm shift compared to technologies 


+ https://tegatlas.com/analytics-and-research/fs776-blockchain-investment-trends-1h-2019 2 
https://www.inquartik.com/inf-blockchain-patent-trends/ 
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preexisting which can have a significant impact on any sector. 


The financial sector is among those most exposed to this paradigm 
shift; it is no coincidence that Bitcoin, the first real large-scale 
application of blockchain technology, was born precisely with the 
ambition to rethink the concepts of money and payment in a bottom-up 


logic. You 


therefore it is natural that financial institutions are particularly active 
on the subject in order to identify and analyze the impacts that 
blockchain can have on current business and, where appropriate, 
identify new solutions as well as the most effective way to manage this 
phenomenon, adapting it to your needs and adapting to its 
characteristics. The various experiments conducted at an international 
level on the one hand highlighted the potential offered by technology, 


on the other they highlighted a series of points of attention. 


This work, carried out by CDP with the collaboration of SIA and IBM, 
without pretending to be exhaustive, intends to be a contribution to the 
debate. The picture that emerges confirms the innovative potential of 
new technologies, but at the same time highlights how incisive and 
extensive action by national and international regulatory bodies is 
needed, which can lay the basis for an orderly development of the new 
services that protect adequately all the parties involved, without at the 
same time imposing constraints such as to prevent the full exploitation 


of the opportunities. 


2. Purpose of the document 





This document is structured in two parts: the first provides a 
non-specialist description of blockchain technologies; the second 
analyzes the potential impacts of introducing blockchain-based 
solutions for three specific use cases in the financial sector - Know Your 
Customer, Cross Border Payments, Bond Issues -to understand how 


the use of DLT technologies can improve existing processes. 


In all cases, we have chosen to start from the description of existing 
processes by analyzing how they could be rethought with the 
introduction of blockchain-based solutions, taking into consideration not 
only technological aspects, but also the impacts on contractual aspects 


and the implications of order. regulatory. In details: 


* the first case treated concerns the trial Know Your Customer: in 
the context of anti-money laundering rules, this term indicates the 
set of activities aimed at acquiring the information necessary to 
identify and assign a risk profile to natural or legal persons who 
intend to start an ongoing relationship with a financial institution (ie 


open a bank account); 


e the second is represented by Cross Border Payments, payments 
international called 
in currencies different from that of the country of origin of the 
transaction, of particular importance in an increasingly global 
market, where individuals and businesses need to make payments 


abroad; 


e the third analyzes the process of issue of bonds, a financing 
instrument chosen with increasing frequency on the national 


territory. 


This document does not present or references 


Double spending defines the ability to use the same digital asset in multiple transactions simultaneously 
https://www.blockchain4innovation. it/esperti/blockchain-perche-e-cosi-importante/ 
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legal and regulatory in relation to the solutions and considerations 
proposed nor in-depth analysis on technological feasibility, although 
the authors recognize and share the importance of these issues. The 
document must therefore be intended to examine the functional 
requirements of the proposed use cases, analyzing how they can 
benefit from DLT technologies in order to obtain an improvement of the 


processes currently in place. 


3. Distributed Ledger Technologies: 


characteristics and purposes 





The Distributed Ledger Technologies, in particular the blockchain, 
reached a high level of visibility with the publication in 2008 of the 
whitepaper " Bitcoin: A Peer-to-Peer Electronic Cash System "In which 
an anonymous developer (Satoshi Nakamoto) proposed the creation of 
an alternative payment instrument to official currencies (bitcoin in fact) 
and a transaction recording system that would guarantee users' 
anonymity, the absence of an intermediary and the immunity of 
transactions to "double spending" phenomena.. To this end, the use of a 
distributed register was envisaged, in which transactions are added to 
the previous ones from time to time (in an "append-only" logic, that is, 
only new information can be added to the register without the 
possibility of changing or delete pre-existing information). According to 


the Bank for International Settlement 


- CPMI (Committee on Payments and Market 


Infrastructures +, the term DLT refers to " processes and related 
technologies that enable nodess in a network to propose, validate and 
securely record an update of the status of a shared registry, distributed 


among the nodes themselves "s. 


More specific, in certain aspects, the definition used in Italian 
legislation: “technologies based on distributed registers" are defined as 
IT technologies and protocols that use a shared, distributed, replicable, 
simultaneously accessible, architecturally decentralized register on 
cryptographic bases, such as to allow registration, 

validation, the update e 
the storage of data both in clear and further protected by encryption 
verifiable by each participant, which cannot be altered and cannot be 


modified "7 


A DLT solution is therefore based on the use of consolidated 
technologies, such as cryptography (generally based on the public key 
/ private key system), to verify the transactions carried out between 


nodes of a network and update the shared registry. 


A particular variation of the DLT concept provides that transactions are 
grouped and recorded within a "block". Each block is added to a 
chronologically previous chain of blocks that records the transaction 
history, according to the methods provided by the specific network 
update protocols and such that the use of cryptographic techniques 
guarantee the integrity and consistency in the construction of these 
chains. The term blockchain refers precisely to this chain of blocks 
containing validated transactions. Blockchain and DLT are therefore 
not synonyms, although in common use they are often used as such. In 
the business sector, DLTs find a potential application to replace, in 


whole or in part, the 


activities which, in the context of an exchange relationship between 
several subjects, are carried out by one or more intermediaries to 
guarantee the correctness of the transactions. The peculiarity of the 
blockchain / DLT is represented by the characteristics that regulate the 


writing and execution of transactions on the register itself: 


1. consent: all participants must agree 
on the validity of the operations This process is based on 
cryptographic algorithms, whose operation is (ideally) «beyond the 
possibility of influence of each individual node of the network, which 
encode in a protocol the validity requirements also deriving from 


economic-administrative agreements between the participants; 


2. country of origin: thanks to the traceability of the 


operations, the participants know not only 
the origin of the asset, but also how its ownership has changed over 


time (ie which actors owned it before him); 


3. immutability: no participant can modify 
or tamper with a transaction after it has been saved to a register. An 
error can only be corrected by a new transaction. At this point both 


transactions will be visible; 


4. purposes: a single ledgers shared provides 
a single point of reference for determining the ownership of an 


asset, the completion of a transaction, the updating of information. 


4 CPMI publishes reports on digital currencies, their developments and adoption processes and has contributed to increasing the efficiency and security of payments, clearing and settlement processes 
of operations. 5 In computer science, a "node" is defined as the elementary unit that performs computational functions within a network. 6 CMPI, "Distributed ledger technology in payment, clearing and settlement - 
An analytical Framework", 2017. 7 Law 11 February 2019, n. 12 - Article 8-Ter, paragraph 1. 8 We use this term because attacks on consensus mechanisms are technically possible against which adequate 


safeguards and countermeasures must be put in place. 


» Ledger is translated with the Italian term "registry". It is a tool that allows you to check, verify, manage the transactions and exchanges that have been carried out between several 


counterparts. With the advent of DLTs, it was possible to switch from paper and centralized ledgers to digital and distributed registers, safe and updatable by the actors of a network. 
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Anything of value can therefore be monitored and negotiated on a DLT 
/ blockchain network, potentially reducing the risks and transaction 


costs for all parties involved. 


Among the main benefits that a DLT-based solution aims to achieve 


are: 


1. greater fluidity and transparency in the exchange of information; 


2. the reduction of management costs and the time needed (from days 
to minutes) for the exchange of goods (digital by nature or digital 


representations of material goods); 


3. the possibility of having fewer intermediaries for the exchange and 
transfer of goods between actors, thanks to the absence of central 


authorities; 


4. the reduction of disputes as a result of better data quality and 


greater traceability of operations. 


The DLT also provide for the possibility of geographically distributing 
the nodes of the network, increasing the level of resilience in the face 
of attacks or local events. The potential greater efficiency of the 
processes managed with a DLT / blockchain technology compared to 
the same activities carried out in the traditional way is only a 
consequence of the increase in trust established among the 
participants in the network; in fact, the participants can, through 
technology, have greater visibility on the life cycle of an information or 
an asset exchanged and have evidence of the behavior of all the other 


parties involved. 


The decentralization and accessibility of the shared registry, however, 
could represent a limit rather than an opportunity in some business 


contexts. Make all or part of the information visible to all 


13 


actors in a network can be, in fact, a risk or go against policies and 
rules, if some of the participants do not have sufficient "rights" to view 
this information. To respond to the need to segregate accesses and / 
or differentiate them, to "permissionless" networks - managed without 
permits, with the possibility for anyone to participate and in which all 
nodes have the same "rights" (as in the case of Bitcoin) - there are the 
permissioned networks in which access can be controlled. 
Permissioned networks are divided into private and public networks. In 


private permissioned networks, 


all 
the actors (nodes and users) are registered and it is possible to assign 
to each role the right, or not, to perform operations or access some 
information: a classic example in this sense is the differentiation 


between "Validator" and "User". 


Each actor must have the necessary authorization to carry out specific 
activities and this condition constitutes a guarantee of greater 
protection of privacy and the information exchanged. Furthermore, for 
this type of network, given the presence of one or more authorities that 
assign roles and access to the participants, issues related to 
governance and centralization are introduced, which are instead 
completely absent for a completely decentralized "permissionless" 
network. On the contrary, the term "public permissioned" refers to a 
network in which the nodes are known and are the only ones that can 
validate the transactions, without there being any distinctions between 
different types of users. In these networks, it is not necessary to have 
an authorization to access the data exchanged between the different 
actors or to submit transactions on the network. At the current state of 
technological solutions, public networks are difficult to scale since the 
increase in the number of nodes, while increasing the overall resilience 
of the system, can have negative effects on the timing of finalizing 


transactions. 


The following table summarizes the cases analyzed. 


In all the cases dealt with below, the use of permissioned solutions is 


assumed, as they are considered more suitable to meet the needs of 


business applications, especially for the financial sector. 


The actors participating in a network and the role they play, as well as 
the governance models for coordination within the reference business 
network, will be identified. In addition, the concepts of Digital Asset - 

the asset exchanged through the network - and of Smart Contract - or 
the digital contracts that regulate transactions on the network - will be 


defined, trying to understand what are the peculiarities that distinguish 





TYPE OF NETWORK 





Publish - Permissionless 
(e.g. Bitcoin, Ethereum, etc.) 


Publish - Permissioned 
(e.g. Sovrin, Stellar) 


Consortium 11 - permissioned 
(e.g. -B3l, ABILabChain) 


Private - Permissioned 
(ex. CISCO, Hyperledger) 


Figure 1: Types of DLT networks and related rights on the ledger 


READING 


nodes 


All nodes All 


Authorized 
nodes 


Authorized 
nodes 


them. 
RIGHT ON THE LEDGER 
WRITING VALIDATION 
All the knots nodes 10 
Authorized no@eshanized 
nodes nodes 
Authorized Authorized 
nodes 
Network Network 
owner owner 


1oPotentially all nodes could perform validation. In the field of cryptocurrencies, for example, depending on the specificities of the DLT protocol there may be "barriers 


at the entrance". For example, the Proof-of-Work logics assign the validation of the block to the node that first solves a cryptographic problem, an activity that requires high computational power and therefore investments in dedicated machines. 
The logic defined Proof-of-Stake instead assign the function of validation of a block in a pseudo-random way, with greater probability to the nodes that hold the largest amount of cryptocurrencies. 


The term "consortium" does not necessarily refer to the legal nature of the relationship between the participants in the network, but to the fact that the ecosystem was born on the initiative of a plurality of subjects 


among them independent who collectively participate in its governance. 
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4. The actors of a permissioned 


network 





Within permissioned networks, the knots that Among the functions of the administrator there is that of operating 
make up the network - understood as individual entities that keep a as Certificate Authority (CA) 
copy of the ledger - can take on some standard logical roles: to provide and manage the different types of certificates required for 


the proper functioning of a permissioned network. These certificates 
are issued to verify the identity of the participants in the network or 
* user node: a participant with permission to join the blockchain to guarantee the transactions made by the participants themselves; 
network, and to conduct transactions with other network participants 
or to access information on the network (e.g. consumer or end 
customer). Depending on the specific application case, user nodes 
can also take on the role of proponent - node proposing a change to e asset issuer: in applications involving the exchange of Digital Asset 
the registry - and / or Validator - node that confirms the validity of the (DA), he is the actor in charge of issuing new DA units; 


changes in the status of the ledger; 


e auditor: node that has the permission to read and control the work 


of all the other nodes, but that generally does not have the 
* system ro to the system permission to make changes to the registers. The auditor can also 

(“permissioning” logics) and provides some of the support services be represented by an external actor, for example a supervisory 
such as the resolution of any disputes and the definition of operating authority or government agency, and generally does not participate 
rules. directly in the update of the ledger. 

! USER NODES i 

i i They intervene on the 

! VALIDATOR | PROPOSING | ISSUING KNOT eee 

i’ NODE | KNOT ASSET | DARE 

! e e i e 

l-_---nn n] nn} J 

ES a MA AAA AS 

CONSENT LOGICS 


DISTRIBUTED LEDGER 


o 
e o They do not intervene on the 
ADMINISTRATOR | AUDITOR information content of the ledger. 
They guarantee the correct 


NODE NODE ae 
functioning of the network. 


Figure 2: The roles of the different nodes within a permissioned DLT 
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5. The governance of a 


permissioned network 





The development of a DLT-based solution with a permissioned model, 
in particular in the case of consortium networks, generally finds its 
raison d'etre in solving a particular business need that does not find an 
adequate answer in traditional solutions. The level of complexity in the 
relationships and dynamics to be managed can be such as to require 
an adequate governance model. Based on experience, organizational 
roles can be identified that are partially distinct from the logical roles of 


the DLT nodes. 


The first "logical" subject is made up of network participants, who 
represent user nodes. Taken together, these nodes make up a Business 
Network, 

identifying with this term all the users of the network who share a 


distributed registry and one 


6. The digital assets 





By the term "Digital Asset" within a blockchain / DLT network we mean 


an elementary unit of information: 


» not duplicable; 
* uniquely associated with an identity; 
e transferable between network users; 


e having an exchange value for network users. 


The Digital Assets exchanged on the network can be representative of 
goods of different nature, from a physical object to intangible assets, 
such as money, patents, copyrights, etc. Although there is no univocal 
and generally accepted classification of DA, an attempt of 
representation is given below which, drawing on and adapting different 


sources, tries to give an overall view of the phenomenon. 
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or more applications. The second relevant role is that of 

Business Network Governor, the person who promotes and 
coordinates the establishment of a Business Network and defines the 
governance rules. The Business Network Governor may not be an 
active member of the Business Network, ¡.e. not a user of the ledger 
and application. Another key role is that of Business Network 
Operator, who is responsible for establishing, monitoring and managing 
the node network. The Business Network Operator oversees the 
functionality of the administrator node and technically implements the 
predefined governance rules. lt can also technically operate user 


nodes if they do not have the necessary technical skills. 


This representation proposes a classification based on the source of 
the value recognized to the Digital Asset and the "function of use", ie 
the holder's value expectation. Like all attempts to give a "static" 
representation to a phenomenon in full development and evolution, the 
proposed classification does not claim to be exhaustive and 
unambiguous since hybrid situations can already be identified today. 


Bitcoin itself, like most cryptocurrencies, 


ideally born as an instrument of 
Payment (Payment Token) has in fact taken on speculative investment 
characteristics. However, the scheme highlights the high flexibility of 
the Digital Asset tool and its potential ability to introduce new 
paradigms in economic ecosystems. The scenario that would arise is 
often indicated with the term "tokenomics" - to indicate the possibility 


for companies to develop projects 


based on the exchange and enhancement of a token, physical or 
intangible. Tokens can be distinguished both on the basis of their 
function of use - payment instruments rather than claims of ownership 
of an asset - and on the basis of the value they represent - which can 
be intrinsic (Commodity Token) or external to the token itself ( Proxy 


Token). 


It i LG. Ww would be possible to introduce a further 


difference between the fungible token 


| DIGITAL ASSET (DA) DIGITAL 
TOKEN 


Elementary unit of information: 


* Not duplicable 
+ Transferable 


* Uniquely associated with an identity 


+ Having an exchange value 





The DA has an "intrinsic" value recognized by users 
/ holders 
(Commodity Token). 





The value of the DA is connected (pegged) at 
the value of other assets 
(off and / or on-chain) through the action 


of asset 
of the DA issuer or automatically 


FONTE DEL VALORE DEL DIGITAL ASSET 
e 


through algorithms. 


| The value of the DA is 


representative of the value 


(currencies, securities, 


commodities etc.) 


collateralized posts. 


Convertibility of the DA is not 


guaranteed. 


>] 





1 
1 
1 The issuer 
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! US convertibility 
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1 
i 
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1 
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1 
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1 
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(e.g. ÈRC20) :2- i.e. perfectly interchangeable tokens as are typically 
Payment Tokens - and non fungible tokens (e.g. ERC721) 13- uniquely 
identified and not interchangeable, as typically the Asset Tokens 
associated with a specific physical asset. Non-fungible tokens can play 
the role of "digital twin" in applications related to the tracking of goods, 
for example along a supply chain, whose attributes such as 


provenance and transfers of ownership are to be recorded. 


>] 





The DA value is representative of an external 
value 


(Proxy Token). 





| The DA value is | 


representative of one obligation The value of the DA is 
of the issuer representative of the 


ownership of a physical or 


>] 


of the DA towards the holders 


(Digital Obligations). | 


intangible asset. 


Participation in future Delivery of a 


service 


profits 





Security Utility Asset 
Token Token Token 
CERTIFICATION OF 
USE OF A SERVICE OWNERSHIP / 
INVESTMENT OWNERSHIP 


A AAA AAA A A 2 AN 


USE / EXPECTATION FUNCTION OF THE DIGITAL ASSET HOLDER 


Figure 3: Types of Digital Asset 


12 Èthereum Request for Comment 20 token created to exchange identical goods (for example ÈRC20 represents the shares of the ICO - Initial Coin Offering - relating to specific projects). 


13 Ethereum Request for Comment 721 is a type of token that represents a unique object of a collection (eg CryptoKitties). 
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7. Smart Contract: definition and legal aspects 





The relationships that must exist between different users, for example 
the ways in which a Digital Asset can be transferred from one actor to 
another, in a distributed network can be implemented by a particular 
form of computer code called 'Smart Contract’. In Italian legislation the 
Smart Contract is defined as "A computer program that operates on 
technologies based on distributed registers and whose execution 
automatically constrains two or more parts on the basis of effecís 


predefined by them" u. 


A Smart Contract is therefore a set of rules (or conditions) that governs 
and outlines a transaction; it is stored in the blockchain / DLT and is 
automatically executed as part of the transaction. Smart Contracts can 
have many clauses, fully or partially self-executable according to the 
occurrence of particular conditions that can also be verified by 
accessing external sources, the so-called "oracles". In this context, 
"oracle" means software that accesses third-party data, processes it 


and writes the result on the ledgers. 


For example, a Smart Contract can implement the contractual 
conditions for which the transfer of corporate bonds takes place or it 
may include travel insurance terms and conditions, which could be 
carried out automatically (for example when a flight is more than six 


hours late) . 


Given the use and diffusion that blockchain networks are having as 
alternative tools for managing transactions, payments and tools 
financial 
in general, it is appropriate to try to understand to what extent Smart 
Contracts are also "contracts" with legal constraints. In other words: 


which one 


1 Law 11 February 2019, n. 12 - Article 8-Ter, paragraph 2. 
1s It is evident that the effectiveness of the oracle depends primarily on the quality and reliability of the external source. 
+ https:/www.trustedsmartcontract.org/#!/tsc 


is the value of Smart Contracts and what is their degree of reliability? In 
this regard it was recently introduced - by the Association of the same 


name ie 


- the concept of Trusted Smart Contract, defined as " a contractual 
model, with increased trust, equipped with enforceability, consisting of 
contractual prose and code executable by a computer, resident and 
active on a blockchain or a distributed ledger and which uses certified 
standards and oracles the". You 

evident that the 
transactions executed on blockchain / DLT in general must comply with 
the same rules to which the processes currently in place are subject. 
As an example, the introduction of the legislation on privacy protection 
in Europe - GDPR - can place constraints on the level of anonymization 
of the data of the participants in a blockchain / DLT, protecting on the 
one hand sensitive information that by its nature must not be made 
public, but going the other way in the opposite direction from the 
principles of complete transparency and traceability with which these 
technologies are born. It is also appropriate, in case of disputes 
between the parties, it is appropriate to define which is the competent 
jurisdiction and how responsibilities should be distributed, also bearing 
in mind that Smart Contracts are and remain computer codes 


(potentially subject to errors). 1. 


w As an example, refer to article 8-Ter of law no. 12 of 11 February 2019: http://www.infoparlamento.it/tematiche/normativa-nazionale/legge-1 1-february-2019-n-12-testo- 
coordinated-conversion-into-law-with-modifications-of-the-decree-law-14-december-2018-n-135-laying-provisions-urgen Regarding Smart Contracts, the rule 


refers to the only possibility that they can meet the requirement of the written form . 
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8. Blockchain / DLT applications in the 


banking and financial context 





One of the sectors in which the application and use of distributed 
ledger technologies has been most used is the financial sector. In this 
context, the attention towards blockchain / DLT technologies is 
consequent to the potential "expectation" generated by Bitcoin: the 
technical possibility of creating a secure exchange system sof a Digital 
Asset, in this case a monetary value, between two subjects in the 
absence of a relationship of trust between them and without the 


intervention of an intermediary. 


The use of blockchain in the financial sector has gradually increased 
and - also internationally - different solutions have been developed, 


tested and adopted. 


The identified use cases range from the use of Digital Asset, to 
cross-border payments, to the exchange of securities. The following 
table summarizes some of the projects that have explored the possible 
ways of applying DLTs in the financial sector. Due to the peculiarities 
of the financial market, the structure of the DLT networks implemented 
is such as to require the presence of actors who fulfill the control and 
regulation roles that are typical of some of the network intermediaries 


today. 


Below, we list some of the roles that can be recognized within these 
networks, useful for introducing definitions and terminologies found 


later in the document: 


1. DA issuer: generally a bank that has 
the responsibility to make an amount of DA available on the 


network based on the specific rules of the specific application; 


2. payment processor: the intermediary who 


allows users to physically make payments; 


3. custodian: trustee who keeps the keys 
private users. Generally it does not have access to the Application 
Programming Interface (API) of the network, but can - if necessary - 


decide to suspend a DA issuer; 


4. quote provider: provides quotes and swaps +s for 


the use of several DAs on the network. 


as In terms of resistance and resilience to external attacks thanks to the distributed validation and consent mechanisms and the certainty of the value due to the impossibility of "double spending". 
1» According to the definition of Borsa Italiana, in the financial sphere a swap is “a contract with which the two counterparties A and B decide to exchange amounts of money (more commonly the 


difference between the latter) based on the specifications of the contract itself, specifications that determine the classification by type of swap contracts (Equity Swap, Commodity Swap, Currency Swap, Interest Rate Swap). [..] Swap 
agreements fall into the category of derivatives [..] and like all derivatives they are used for two essential purposes: risk hedging and speculation. " 
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TYPE OF NETWORK 





Stella project 


Jasper - Ubin project 


JPM Coin 


Project Khokha 


Project MOTHER 


Project "Spunta" 


We.Trade 


PROMOTING BODY 


ECB (European Central Bank), BOJ 
(Bank of Japan) 


Bank of Canada (BOC) and the Monetary 
Authority of Singapore (MAS) 


JPMorgan 


South Africa Reserve Bank (SARB) 


Bank of France (BoF) 


ABILab 


CaixaBank, Deutsche Bank, Eurobank, Erste Group, 
Ceskoslovenská obchodní banka, HSBC, KBC, 
Natixis, Nordea, Rabobank, Santander, Société 
Générale, UBS, UniCredit 


Figure 4: Examples of projects for the application of DLT in the financial sector 
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DESCRIPTION 


The ECB and BOJ joint work has led to the publication of 
three studies, which investigate how both high-value 
payments on DLT, and payments in DvP - Delivery versus 
Payments - that issue of synchronized bonds and Cross 
Border payments can be implemented safely with DLT 
technologies. 


The Jasper-Ubin project aims to determine whether, with 
recent technological innovations, it is possible to make secure 
cross-border payments, thanks to the use of DLT, exploring 
the use of HTLC (Hash Time-Locked Contract) in the 
execution of Cross-border payments. 


JPCoin is a digital coin, issued by JP Morgan with the aim of 
making available to its customers a blockchain-based 
technology that allows you to exchange money instantly. 


SARB has experimented with the use of DLT technology for 
interbank payments (digitization of the Rand - wholesale 
Central Bank Digital Currency). 


BoF has promoted a DLT-based application shared among all 
French banks for the issue and sharing of SEPA Credit 
Identifiers (SCI), replacing the previous manual process. 


Introduction of a DLT-based application to support the mutual 
account reconciliation process. The project successfully 
passed the experimental phase in 2019 and will be brought 
up to speed on all Italian banks during 2020. 


The founding banks have formed a consortium to offer their 
client companies a series of financial services, We.Trade is 
an international trade finance platform based on blockchain 
technology that allows SMEs to conclude commercial 
agreements in real time in the field of import / export and to 
request banking products directly linked to the deal finalized 
and tracked on the same platform. 





Know Your 


A ~ <Gustomer 








1. Introduction 





The process of Know Your Customer ( KYC) for anti-money laundering 
purposes is the set of activities and controls put in place by the so-called 


"obligated subjects" 20 


in order to 
achieve real knowledge of their counterparts 
therefore reducing the risk of 
involvement, also unconscious in facts 
connected with the money laundering illegal 


or with the financing of terrorism z. 
The obligation to perform KYC activities 2 arises in the hands of the obliged 


subjects at the times and in the cases indicated below: 


to) when establishes an ongoing relationship 


(e.g. opening a current account, granting a loan, etc.); 


b) when performing an operation ordered by the customer 
not attributable to an ongoing relationship and for an amount equal 
to or greater than 15,000 euros, regardless of whether it is carried 
out as a single transaction or with multiple split transactions, or 


consists of a transfer of funds in excess of 1,000 euros; 


c) when there is a suspicion of money laundering or financing 
terrorism, regardless of any applicable exemption, exemption or 
threshold; 
d) when doubts arise on completeness, 
reliability or truthfulness of the information or documentation 


previously acquired by customers. 


Based on the principle of the risk-based approach, the intensity and 
extent of KYC obligations are modulated according to the degree of 
money laundering and terrorist financing risk associated with the 


individual 


ashttps://home.kpmg/xx/en/home/insights/2019/03/combating-financial-crime-fs.html 
2shttps:/Avww.ibm.com/blogs/blockchain/2018/09/blockchain-for-kyc-game-changing-regtech-innovation/ 
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customer. When the obliged subjects are unable to comply with the 
KYC obligations, they cannot establish the ongoing relationship or 
perform the occasional operation and refrain from continuing the 
relationship already in place. The risk of involvement in money 
laundering operations for the obliged parties increases when the 
customer's knowledge is less and the internal verification activities are 
inadequate. In this context, it is clear that KYC's activities go beyond 
the simple identification of the customer and presuppose the 
preparation of analysis activities with a level of detail directly 
proportional to the degree of risk. Above all, these checks must 
continue over time and for the duration of the relationship. Customer 
knowledge must be acquired on the basis of reliable and continuously 
updated evidence. According to a report written by the consulting firm 
KMPG z, an average bank spends $ 48 million 2s per year to combat and 
prevent the risk of being involved in recycling operations, with an 
estimated average cost of performing the KYC procedure for each 


individual customer of $ 600. 


Obligated parties are required to invest more and more in the 
onboarding processes of new customers, the acquisition and 
verification of information on them, as well as the use of commercial 
databases or the development of internal IT procedures for the 
management of obligations KYC. Even if you do not want to consider 
the economic implications for the obliged subjects, it is clear that the 
KYC process is very onerous also for the customers: the latter find 
themselves forced every time to provide the same information to 


different subjects, also through their own physical presence. 


In this context and with the aim of improving the service offered to its 
customers, reducing management costs and times and ensuring 
compliance with all applicable regulations, obliged parties are 
considering investing in systems that allow sharing of information. 
collected during the KYC process within a network of subjects who 
have the right (ie the obliged subjects). Applications based on 
Distributed Ledger Technology could in this sense provide a 
technological solution particularly suited to making the KYC process 


more efficient, while ensuring adequate levels of reliability and 


“FIG 5 


CORPORATE CUSTOMERS 


Poor customer experience 


* Different requirements from bank to 
bank 
+ Long on-boarding times 


LEGISLATORS & AUDITORS 


Lack of standardization Effectiveness of 
audits 


* Access to information 
* Post-mortem vs real time 


Figure 5: The major business problems within KYC processes 


ashttps://www .fatf-gafi.org/publications/fatfrecommendations/documents/consultation-digital-id-guidance.html 
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In this context, it should be noted that the Financial Action Task Force 
(FATF) has recently published in consultation25 a guide with the aim 
of guiding the obliged subjects in the use of digital identification 
systems within the KYC process also in order to facilitate the 


onboarding of new customers. 


FINANCIAL INSTITUTIONS 


expensive 

* $ 600 + per KYC (on average) 
* Loss of revenue opportunity 
Time consuming 

* 5-100 documents per KYC 


* About 24 days for a new customer to board 


* KYC updates take 20 days 


Legal and legal risk and reputational risk 


* Fines and suspensions of activity for 
non-compliance 
* Damage to brand reputation 





2. AS IS scenario 





The KYC process consists of the following activities: 


to) customer identification (natural person or person 


legal), of the executor z and the beneficial owner 2s; 


b) verification of the identity of the client, the executor and 
of the beneficial owner on the basis of documents, data or 


information obtained from a reliable and independent source; 


c) acquisition and evaluation of information on the 
purpose and nature of the ongoing relationship and, in the 
presence of a high risk of money laundering and terrorist financing, 


of the occasional operation; 


d) customer profiling; 


e) retention of data and documents; 


f) exercise of constant control during the 


ongoing relationship. 


The identification and verification of the identity of the customer, the 
executor and the beneficial owner, referred to in the aforementioned 
letters a) and b), are carried out before the establishment of the 
ongoing relationship or the assignment of the assignment for the 
performance of a professional service or before the execution of the 
occasional operation. These activities are specified and described 


below. 


A. Identification of the client, the executor and the beneficial 


owner. 


If the customer is a natural person, the KYC process begins through 
the acquisition of identification data » provided by the customer himself, 
upon presentation of a valid identity document or other equivalent 
identification document in accordance with current legislation, of which 
a hard copy or electronic copy is acquired. If the customer is a person 
other than a natural person, and therefore operates through natural 
persons with the power to represent him, identification takes place 
through the acquisition of identification data » of the same as well as 
information on the type, legal form, purposes pursued and activities 
carried out and, if existing, the details of the registration in the 
business register and in the registers kept by the sector supervisory 
authorities. Any co-nominees, executors and beneficial owners are 
identified in the same way as customers. In the case of the executor, 
information relating to the existence and extent of the power of 
representation must be acquired. Customers provide in writing, under 
their own responsibility, all the necessary and updated information to 
allow the obliged subjects to fulfill the KYC process. The declaration is 
in practice made through a specific so-called "Adequate Verification 


Form" (MAV), 


2sArt. 18 and following of the Anti-Money Laundering Decree (legislative decree 21 November 2007, n.231, as amended by the legislative decree 4 October 2019, n.125, implementing the directive (UE) 


2018/843). 


a Executor: the person delegated to operate in the name and on behalf of the client or to whom anyway powers of representation are granted which allow him to operate in the name and on behalf of the client (art. 


1 paragraph 2 letter p) of the Anti-Money Laundering Decree. 


a Effective owner: the natural person or natural persons, other than the customer, in whose interest or of whom, in the last resort, the ongoing relationship is established, the professional service 


is returned or the operation is performed (art. 1 paragraph 2 letter pp) of the Anti-Money Laundering Decree. 


2 Identification data of a natural person: the name and surname, the place and date of birth, the registry residence and the domicile, where different from the registry residence, the details of the document of 


identification and, where assigned, the tax code (art.1 paragraph 2 letter n) of the Anti-Money Laundering Decree, 


so Identification data for subjects other than a natural person: the name, the registered office and, where assigned, the tax code (art.1 paragraph 2 letter n) of the Anti-Money Laundering Decree. 
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B. Verification of the identity of the client, the executor and the beneficial 


owner. 


The verification of the data relating to the customer, the executor and 
the beneficial owner requires verification of the veracity of the 
identification data contained in the documents and information acquired 
at the time of identification. With reference to the customer, a natural 
person, the executor and the beneficial owners, the obliged subjects 
must verify the authenticity and validity of the identity document or other 
equivalent recognition document acquired and of the existence and 
extent of the power of representation by virtue of which the executor 


works in the name and on behalf of the client. 


In the event that the customer is a subject other than a natural person, 
the verification of the data relating to the same takes place by 
checking with information inferred from reliable and independent 
sources (e.g. register of Italian companies), of which evidence can be 
acquired via autonomous or through the customer and a hard copy or 
electronic copy is kept. With reference to the effective ownership of the 
client other than a natural person, measures are also adopted to 
ensure the reconstruction of the ownership and control structure with 


reasonable reliability. 
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C. Acquisition and evaluation of information on the purpose and 
nature of the ongoing relationship and, in the presence of a 
high risk of money laundering and terrorist financing, of the 


occasional operation. 


As part of the process of identifying the customer, the executor and 
the beneficial owner, information on the purpose and expected nature 
of the relationship is acquired by the customer through MAV. The 
obliged subjects assess the compatibility of the data and information 
provided by the customer with the information they independently 
acquire, also with reference to the operations concretely performed by 


the customer. 


D. Customer profiling. 


At the same time as the KYC process, on the basis of subjective and 
objective elements, each customer is assigned a recycling risk profile 
(PDR) according to predefined risk classes. The processing of the risk 
profile is based on IT procedures, so if the automatically proposed risk 
class is not consistent with the customer's own knowledge, it is 
possible, if necessary, to assign higher risk classes. To determine the 
PDR, elements of assessment and risk factors are considered which 
refer mainly to the characteristics of the customer, to his conduct and 


to the specificities of the operation or ongoing relationship. 


E. Retention of data and documents. 


The copy of the documents acquired during the KYC process is kept 
for a period of 10 years from the termination of the continuous 


relationship, of the professional service or from the execution of the 


occasional operation. 


FIG 6 


CHAMBER OF 
COMMERCE 


F. Exercise of constant control during the ongoing relationship. 


Constant control is exercised by examining the customer's overall 
operations, having regard to both ongoing ongoing relationships and 
any specific transactions that may be arranged, as well as through the 


acquisition of information during the verification or updating of news for 


the identification of the customer, the beneficial owner and the 


assessment and evaluation of the nature and purpose of the 


relationship or transaction. 


The update is however carried out when the information previously 


acquired and used in the KYC process is no longer current. 


Vv Certificate of incorporation 
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Figure 6: Process of acquiring supporting documentation and identity verification 
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Execution by third parties 


With the exception of the exercise of constant control and within the 
limits of the provisions of the current anti-money laundering legislation, 
the activities of the KYC process can be delegated to third parties. In 
this case, these activities are met by issuing a suitable certification by 
the third party who has carried out them directly. The attestation must 
be clearly traceable and transmitted by the third attester. To 
standardize the information acquisition process, specific forms are 
prepared with the confirmation of the correct fulfillment of the KYC 
process activities by the third party. The forms prepared in practice 


contain the following information: 


FIG 7 


a) the identification data of the customer, the executor and the beneficial 


owner; 


b) an indication of the types of sources used for verifying and 


verifying identity; 


c) information on the nature and purpose of the relationship and 


the occasional transaction. 


Request to open continuous 
0 relationship. 
v) ` 
CUSTOMER 
EN 
< 
PROVIDES MAV 
FORM TO BE 
COMPLETED 
v 


MAV compilation request. 


Figure 7: Execution by third parties 
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Third parties certifying, upon request, must promptly transmit copies of 
the documents and information acquired. The attestation can be made 
by the third party in paper or electronic form. The obligated subject 
that receives the certification assesses whether the elements collected 
and the checks carried out by third parties are updated, suitable and 
sufficient for the fulfillment of the KYC process as required by the 
anti-money laundering legislation. Otherwise, according to the cases 


and circumstances, it will: 


e inform the third certifying any 
irregularities, deficiencies or inconsistencies found in the 


documentation received; 


* make the necessary adjustments or additions; 


e directly fulfill the KYC process; 


e refrain from establishing an ongoing relationship or from carrying 


out the operation, evaluating whether to report to the Financial 


Intelligence Unit for Italy (FIU) if the conditions set out in article 35 


of the anti-money laundering decree are met. 


Check information, integration and any 
request for clarification. 
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3. Identification of critical issues and improvement requirements 





The process described in the previous paragraphs, although regulated 
and detailed in a timely manner, presents critical issues and 


inefficiencies that make its execution slower and more complicated. 


Reliability and suitability of sources 


In the KYC process, as described in the previous paragraph, obliged 
parties must have systems and procedures in place to verify the 
veracity of the data contained in the documents and information 
acquired at the time of identification by the customer. By way of 
example, in the case of a natural person customer, the front office 
operator must verify the authenticity and validity of the acquired 
identification document, also for example through feedback on the 
public system for the prevention of identity theft provided for by the 
decree Legislative 11 April 2011, n. 64. In the case of a legal entity 
customer, the operator verifies the identification data of the same with 
those deducible from the business register through consultation via 
web application or acquisition in paper format of the chamber 
certificate or equivalent. In this regard, it should be noted that as part 
of the checks carried out, the sources used are not always structured, 
updated and easily accessible, thus making the KYC process 
extremely time consuming. Without considering that the customer 
must provide his data and documents to each obligated subject every 
time he opens an ongoing relationship (e.g. current account, savings 
account, securities account, etc.) and that in such cases the obliged 
subjects repeat every time the same checks of authenticity and validity 


of data and documents, even in the absence of changes. 


Data repository 


With reference to the effective ownership of customers other than a 
natural person, it is clear that, according to a risk based approach, the 
obliged subjects adopt procedures and systems to reconstruct, with 
reasonable reliability, the ownership and control structure and keep a 
copy in paper format or electronic. The identification and verification 
activities of the beneficial owner are not always so easy, especially in 
the case of articulated and complex corporate structures, also due to 
the absence of unique and shared repositories. The anti-money 
laundering decree, in this regard, it establishes the obligation to 
establish a register of beneficial owners. However, to date, the 
modalities for the establishment, compilation and updating of the same 


have not yet been defined by ministerial decrees. 


Updating the data 


With reference to the exercise of constant control, during the entire 
duration of the relationship with the customer, the obliged subjects 
verify the updating of the data and information acquired by the 
customer. In the case of remote operation or in any case in the 
absence of a useful contact with the same, it is not always possible to 


easily update them. 


a Art. 21 of the Anti-Money Laundering Decree (Legislative Decree 21 November 2007, n.231, as amended by Legislative Decree 4 October 2019, n.125, implementing the Directive (UÈ) 2018/843). 
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4. TO BE scenario 





As previously described, in the KYC process, despite being the 

obliged subject responsible for the conduct of the same, the customer 
is responsible for the correctness of the data and information declared. 
By emphasizing the concept of responsibility with regard to one's data»: 
the concept of Self Sovereign Identity (SSI) took shape and 
specifically, the possibility for a subject to control access to their data 
by third parties. There is talk of "sovereignty" to indicate that this 
control is exercised not as a consequence of a mere technological 


ability acquired, but by virtue of a legal legitimacy. 


From a functional point of view, the concept of SSI is realized by giving 
the possibility to individuals to create their own "decentralized 
identifiers" (DID), that is, unique identifiers that can be used in a 
decentralized system, ¡e without a single authority central responsible 
for assigning identifiers. Through DID, a generic "user" could "create" 
his own identity, generating his unique identifier, to which attach any 


related (or correlable) information, using credentials 


verifiable by authority 
recognized. By implementing a system in which the user checks his 
identity and the data associated with it, he has visibility on where this 
information is saved and can verify its use by external actors, in this 
scenario we are able to create the so-called models by SSI. In fact, 
DLT systems represent an extremely relevant opportunity for effective 


and efficient management of DIDs and could be the technological 


infrastructure enabling the SSI models within the KYC process. 


As part of the KYC process, and in order to overcome the critical issues 
related to the reliability and suitability of the sources, it is pointed out that 


multiple attributes can be connected to each DID. 


These attributes can also be certified individually by a third party 
(Credential Issuer) with the use of a digital signature, possibly 


supplemented by a notarization function for 


introduce a time reference. In 
in this case the "Verified Credentials - VC" are obtained. By way of example, the information 
"name + surname" is nothing more than a "verified credential" (as issued by the registry) 
associated with the DID of a natural person. The SSI system provides that the holder of the 
DID (customer) can give access to his VC to third parties (obligated subjects), who can verify 
their authenticity with the subjects who have certified them. Speaking of entities other than a 
natural person, not only the classic company data (eg company name, VAT number and 
address - for example certifiable by the Chamber of Commerce), but also any other form of 
relevant documentation can be "verified credentials". The DID holder therefore becomes fully 
responsible for the correctness of the information provided, whose validity (if qualified as 
verified credentials) is easily attested by any other person who requests it (Credential Verifier). 
All information relating to the subject's KYC dossier can be stored in a repository whose 
accessibility is controlled by the data owner (customer). The mutual verification of information 
is also protected by the use of hash functions for the encoding of sensitive data. These 
functions allow you to generate a string of defined length starting from one of arbitrary length, 
guaranteeing the following requirements: All information relating to the subject's KYC dossier 
can be stored in a repository whose accessibility is controlled by the data owner (customer). 
The mutual verification of information is also protected by the use of hash functions for the 
encoding of sensitive data. These functions allow you to generate a string of defined length 
starting from one of arbitrary length, guaranteeing the following requirements: All information 
relating to the subject's KYC dossier can be stored in a repository whose accessibility is 
controlled by the data owner (customer). The mutual verification of information is also 
protected by the use of hash functions for the encoding of sensitive data. These functions 
allow you to generate a string of defined length starting from one of arbitrary length, 


guaranteeing the following requirements: 


e Practical impossibility ss to go back to the original string starting from 


a HAS; 


æ This document refers to the customers of the subjects obliged by the anti-money laundering legislation, however the scenario can also be extended to different processes but with the same purposes. 


as These are unidirectional functions, such that tracing from output to input is generally done with a "brute force" approach. 
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e Practical inability to search for a string that generates a HASH In addition, given the need to fulfill the obligations imposed 
equal to a given HASH; from GDPR regulation, any 
SSI infrastructure should adopt a "Zero-Knowledge Proof" approach, ie 
e Practical inability to search for two strings that generate the same no personal information must be recorded on an immutable ledger. 


HASH. 


lt can therefore be understood that the functionality required of an SSI 
system, including the decentralization of information and notarization, 
are typical of DLT architectures. These features can also, if properly 
used, allow the implementation of ecosystems compliant with the 
provisions of the elDAS Regulation thus providing the necessary 


regulatory contextos. 


1. The data holder requires the Credential 


Issuer the issue of a credential (e.g. certificate of registration with 


E 0 the Chamber of Commerce) 
Ea 


2. The Credential Issuer sends the document directly 


CREDENTIAL VERIFIED IDENTITY to the data holder. 
ISSUER CREDENTIALS OWNER 
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3. The subject opens the Credential Verifier (e.g. a bank 





i 
1 
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1 as part of the KYC process) access to the Respository to 
1 
i acquire the KYC document. 
i 
1 
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> 
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um ri that the document was issued by a qualified body. 
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Figure 8: Example of SSI application to the KYC process 


»ÈElectronic IDentification Authentication and Signature - EU Regulation n. 910/2014. 
ss For further information, see EU Blockchain Observatory and Forum - "Blockchain and Digital Identity", 2 May 2019. 
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The European Blockchain Service Infrastructure (EBSI) project was 
launched in Europe in August 2019 se, in which a use case relating to the 


identity of the individual based on SSI logic will be developed sr. 


The success of the initiatives described above is subject to the number 
of subjects who will take part in them (investing economic resources 
and professionalism in the projects) and obviously to the opening, 
however already shown, by the Supervisory Authorities, to the use of 
these innovative technologies to support the KYC process. In fact, it is 
necessary that international and national anti-money laundering 
regulations include solutions based on SSI logic in the methods for 
carrying out the KYC process, also exceeding the current provisions 
for the retention of data and documents acquired as part of the 
aforementioned process. In order to proceed with the construction of 
an SSI + KYC ecosystem it is first necessary to identify a "governor" 


capable of defining the technical rules 


(starting from the ecosystem data model, or the necessary information 
that the "certifications" must contain) and business (eg reciprocal 
remuneration model between "credential issuer" and "credential 
verifiers"), essential for the functioning of the system . This role could 
probably be fulfilled by an association or consortium in which all 
participants can identify themselves, thus facilitating the establishment 
of the network. These elements are necessary so that all the 
participants in the business network, in the various roles, can 
maximize the benefit (economic and process) obtained through 


participation in the ecosystem. 


The second point concerns the underlying technological infrastructure 
(nodes, network, security), of which they must be defined: type (starting 
from the choice whether permissioned or permissionless), type of DLT 


protocol, architectural model etc. 


ss ÈBSI is a shared project of the European Commission and of the European Blockchain Partnership (EBS), the latter represents an initiative born 2018 in which 23 States actively participate 


Members, who are committed to sharing and collaborating in the exchange of positive experiences and expertise in the Blockchain field. 


a https:/Amww.eesc.europa.eu/sites/default/files/files/1._panel_-_daniel_du_seuil.pdf 
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5. Ecosystem and expected benefits 





The TO BÉ scenario would allow to address the critical issues that 4. the "end users" through the infrastructure are 


emerged in relation to the current management process of KYC, 
bringing to all the actors involved the following benefits, to the benefit 
not only of the obliged subjects directly involved in the anti-money 


laundering legislation, but of the entire ecosystem : 


1. each customer maintains control of their own 
identity and becomes responsible for updating the information. The 5 
user experience improves significantly compared to the current 
scenario in which there is a multiplication of information sources 
(even discordant with each other), in which the customer must act 
as an intermediary between the different obliged subjects 
(overcoming the problems related to the need to use reliable and 


suitable sources); 


2. the obliged parties belonging to the network have directed 
access to the repository containing the verified credentials, 
without needing interchange 
information between them, as happens in the current scenario. In 
this sense, the obliged subjects assume at the same time the role 
both of verifying the credentials, 
that of users of the same 


(overcoming problems related to data repositories); 


3. in the proposed solution, all and only the parties involved 
the circuit will be able to access the shared repository of the KYC 
dossiers, benefiting from the reduction in time and cost in the 
management and completion of the KYC process, including the 
exercise of constant control (overcoming the problems connected 


with the need to always have updated data); 
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owners of their sensitive data and can quickly manage and update 
them, as well as grant their own certificates and intervene promptly 
in updating personal information (e.g. renewal of identity document 


- improvement of customer experience); 


. not only the obliged subjects will be able to join the 


new business network that would be created, but also other 
entities, which to provide some of their services may have part or 
all of the information on future customers in a more flexible and 
secure way (so-called "KYC Sharing", which would certainly involve 


a improved customer experience). 
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1. Introduction 





The constant growth of international trade and the intensification of 
migratory phenomena have made the exchange of money across 
borders an essential activity for many businesses and for a significant 
number of individuals. In this document, the term "Cross Border 


Payments" refers in particular to payments 


between two counterparties (Payer and 


FROM (ORDERING) 





Individuals 
(P-Private) 
Individuals P2P (e.g. 
(P-Private) international 
remittances) 
Companies B2P 
(B-Business) (e.g. payments to collaborators 
abroad) 
Governments G2P 


(G-Government) (e.g. pensions for citizens 


residing abroad) 


Figure 9: Types of Cross Border Payments 


ss Payments within SEPA, which benefit from services and systems that can guarantee high levels of efficiency, are not considered. 
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Beneficiary) who operate in two different jurisdictions in which two 
different currencies are legal tender ss, es. euro - dollar; euro - Saudi 
Riyal, etc.). Depending on the type of counterparties involved, different 


payment combinations can be configured, as illustrated below: 


A (BENEFICIARY) 


Companies Governments 


(B-Business) (G-Governement) 


P2B 
(e.g. e-Commerce) P2G (e.g. taxes and fees from 
citizens abroad) 


B2B (e.g. payments to B2G (e.g. export tariffs) 


foreign suppliers) 


G2B (e.g. 
international 
suppliers) 


G2G (e.g. international aid) 


While acknowledging the relevance and complexities of international 
remittances and the spread of P2B payments, 

consequent to the growth of e-commerce mainly driven by 
global operators (Amazon, eBay, Expedia etc.), the analyzes carried 
out and reported in this document have focused on B2B payments, 


which in 2017 moved 


124,000 29 billions of dollars. B2B payments can vary substantially from 
case to case, depending on the frequency and amounts exchanged: 
from the supplies of large volumes of raw materials, the availability of 
which can also be influenced by seasonal factors, to recurring 
purchases of semi-finished products in the context of a production 


process designed according to the logic of lean production so. 


Companies operating on international markets may find it difficult to 
find the best payment conditions, i.e. those best suited to protect their 
interests, whether they are exporting (of finished products) or 
importing companies (often of raw materials or semi-finished 
products). In the context of international sales contracts, the fulfillment 


of the payment obligation highlights the following opposing interests: 


e the seller (exporter) has an interest in avoiding the risk of 


non-payment or delayed payment with respect to the delivery of the 


goods / execution of the service; 


+ the buyer (importer) has the objective of verifying the conformity of 


the purchase with respect to what was agreed, postponing the 


payment to the conclusion of these checks. 


a McKinsey & Company - "Global payments 2018: A dynamic industry continues to break new ground" - October 2018. 


Italy, given its strong vocation as a country of transformation, is 

particularly impacted, with incoming and outgoing flows linked to the 
import-export activity of the order of € 500 billion per year, of which 

about a third generated by small and medium-sized enterprises «2, consistent 
with the peculiar structure of the Italian production fabric. In this 
perspective, in the analysis of the scenarios relating to Cross Border 
Payments, a representation of the phenomenon and of possible 
developments that are applicable to a wide range of types of 


transactions is proposed. 


«o The terms lean manufacturing or lean production refer to a production philosophy that aims to minimize the waste generated during the production process. 


a ISTAT Yearbook 2019. 
«2 Eurostat. 
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2. AS IS scenario 





The following conditions must be met for transnational payments to be To date, the credit institutions, which represent the subjects historically 
made: responsible for meeting these requirements, offer companies the main 
payment services, ranging from the simplest (clean payment) to the 
e establishment of a network of trust relationships between entities more structured ones (Documentary Collections, Documentary 
operating in individual jurisdictions; Credits, Bank Payment Obligation), accompanied, where appropriate, 
by various forms of other banking services (export advances, import 


e availability of technological infrastructures that allow the secure financing and / or signature credits, guarantees issued, etc.) «s. 


transmisgima @ of intagri d reliability) of the messaging 
e = fer o i 


e availability of a liquid currency market; 


The ways in which these services are provided are manifold and fall 


into the four main theoretical models illustrated below 44. 


e ability to meet growing regulatory requirements. The template of the correspondent banks implements the 
the so-called international bank transfer (clean payment, bank transfer, 
wire transfer) which in summary consists of the transfer of funds from 
the bank of the Ordinant to a bank in the jurisdiction of the Beneficiary 


with whom the latter maintains the account relationship. 


BANK OF THE PAYMENT INFRASTRUCTURE CORRESPONDING 
ORDERING PARTY OF THE ORDERING 
NATIONAL BANK 
v 








Ed ° I l I i x ‘ 
BENEFICIARY BANK OF THE PAYMENT INFRASTRUCTURE CORRESPONDENT OF THE 
BENEFICIARY BANK OF THE 


NATIONAL BENEFICIARY 


Figure 10: Cross Border Payment model through correspondent banks 


4 Please refer to the copyrighted publications of the International Chamber of Commerce which report the banking rules and customs in this regard. Example: Uniform Customs and Practice for 


Documentary Credits {YCP600), Uniform Rules for Demand Guarantees (URDG758), Uniform Rules for Collection (URC 522). 
as Adapted from: Bank for International Settlements - CPMI - "Cross Border Retail Payments" - February 2018. 
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JURISDICTION A JURISDI 





payer BANK OF THE BENEFICIARY 
ORDERING PARTY 
= BANK OF 
THE BENEFICIARY 


VALIDATOR 


FIG 1 


11: Closed Loop Cross Border Payment model 


The Closed Loop model in essence, it is an "extremism" of the former It finds its limits in the fact that there are few banking groups that have 
and occurs when the two subjects (Payer and Beneficiary) are both a widespread international presence and in the very fact that the payer 
customers of banks belonging to the same banking Group. The and beneficiary must be customers of the same group. 


advantage in this case is given by the speed of execution, given that 
the exchange of information can take place on the private network of 


the banking group itself. 


payer BANK OF THE PAYMENT 
ORDERING PARTY INFRASTRUCTURE 
NATIONAL 





BENEFICIARY BANK OF THE PAYMENT 
BENEFICIARY INFRASTRUCTURE 
NATIONAL 


Figure 12: Cross Border Payment model through interoperable infrastructures 


The third model provides the implementation of interoperability to international standards 4s, limit real cases to 

solutions among national payment infrastructures. lt is potentially bilateral integration between nations with strong commercial relations 4 and 
interesting, but the complexity in the realization of the integration, also / or migratory flows and can hardly be established quickly on a global 

as a consequence of the incomplete adhesion scale. 


as First of all the ISO 20022 standard. 
« An example in this sense is Directo to México, which connects the ACH managed by the Federal Reserve with the equivalent ACH managed by Banco de México, above all to facilitate remittances to the 


Mexico of Mexican workers in the USA. 
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JURISDICTION A 





payer PEER-TO-PEER PAYMENT BENEFICIARY 
INFRASTRUCTURE 
Figure 13: Cross Border Payment Peer-to-Peer model 
The latest model - Peer to peer - (once practicable only with "physical" The mandate that the company gives to its bank to carry out the 
transmission of cash) it is gaining importance following the spread of transfer of value must contain at least the following instructions: 


DLT / blockchain technologies and cryptocurrencies (first of all 
Bitcoin). Although the volumes handled are all in all negligible 
compared to the overall flows, these technologies present some . 


interesting ideas. 


The correspondent banking model . 


The correspondent bank model is currently the most used. If the way 
and means historically used for the transfer of value was "by mail" 


(mail transfer), today the "transfer of value" takes place through: 


+ the use of the Network (e.g. SWIFT) and related communication 


standards (e.g. FIN messages); 


* correspondence relationships between credit institutions 


authorized to access the network and manage messaging. 


« Typical fare options are: 


all costs of the payment transaction are borne by the Beneficiary (BÈN); 
all costs of the payment transaction are paid by the Ordinant (OUR); 


the amount, the currency, the payment date; 


the identification data of the Beneficiary and the coordinates of the 


beneficiary bank; 


define who bears the bank costs (tariff option «n of payment. 


the originator pays the costs of his bank while all the expenses claimed by the other credit institutions involved in the transaction are borne by the beneficiary (SHA). 
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Layout 
Amount, currency, date, bank details, 
tariff option 
SMES ORIGINATING 


FINANCIAL 
INSTITUTION (OFI) 


r 


Check provision 

Liquidity and ordering currency, 
liquidity and beneficiary 
currency, legal constraints 


Figure 14: Example of Cross Border Payment through correspondent banks 


The credit institution then proceeds to process the mandate received 


by verifying, in addition to the authenticity of the mandate, that the 


currency and the amount of the transfer (for availability on the debtor's 


account and for compliance reasons) as well as the Beneficiary and 


the country of the same (for availability of correspondence accounts in 


the country of the Beneficiary and / or for compliance reasons). 
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SSI better 





RECEIVING SMEs 
FINANCIAL 
INSTITUTION (OFI) 


Positively verified that the Institute can transfer value from the 
Ordinant to the Beneficiary within the terms of the mandate, the 
Institute will identify the best way (using the SSI - Standing Settlement 
Instructions) to send the value transfer message. It would therefore be 
advisable to check in advance the presence of correspondence 
relations as direct as possible between the bank of the Beneficiary and 


that of the Ordinant. 


3. Identification of critical issues and improvement requirements 





In the face of the process described in the previous paragraphs, it is 
possible to identify below the major sources of cost and criticality that 


credit institutions and businesses are faced with: 


At the "front end" / "front office" level: 


* order collection management (applications to enter / collect / 


process mandates); 


e customer relationship management (carrying out investigations to 


understand the bank transfer settlement status). 


At the "back end" / "back office" level: 


e interbank network service; 


* messaging management (bank applications to generate / receive 


messaging); 


e compliance management (costs to verify countries under embargo, 
FATF «, info provider costs for list names, reporting costs for 
Compliance / AML / ATF «, checks on listed names, management of 


requests from judicial authorities); 


* management of correspondence relationships (opening of 
correspondence accounts on the main markets with various costs, 
liquidity costs, account reporting, interbank charges for 
intermediation services, complaint costs and management of these 
charges, service costs 


information to have the SSI and the Banks register). 


The activities and the related costs concern both the bank of the 
Ordinant and the bank of the Beneficiary and, albeit to a lesser extent, 
any other correspondent banks 

affected by inherent activities 


in the execution of the mandate received. 


From the users' point of view, this model presents some critical issues: 


e execution times - The national availability of efficient payment 
systems that can reach execution times near real time generated a 
similar expectation for international payments. Furthermore, 
especially in the case of transactions involving multiple 
intermediaries, it is difficult for the Payer and Beneficiary to be 
sure of the execution times of the disposition and of the 


information on the settlement status of the transaction; 


e transparency - Especially for medium / small businesses it can be 
difficult to have certainty of transaction costs, as they may not be 
aware of the exchange rate applied by the bank. 


From a process point of view, these costs are mainly attributable to the 
negotiation and settlement phases of payment transactions, which can 
have long management times and varying complexity depending on 
the regulation in force in the countries with which the exchanges of 
money. Furthermore, the payment execution times can take up to a 


few days, making them subject to exchange rate risks. 


From this analysis, the need to streamline the multi-currency 
international payment process emerges, reducing the number of 
intermediaries participating in it and consequently the costs and time 
of managing transactions. The need also emerges to facilitate the 
management of payments and transfers to those countries defined as 
non-mainstream, ¡.e. whose currencies are characterized by low 
liquidity, and which nevertheless represent countries producing raw 
materials - also fundamental for the production activities of our 


country. 


ss Financial Action Task Force: intergovernmental body established in 1989 with the aim of defining standards and promoting the implementation of legal, regulatory and operational measures to 


counter money laundering, terrorist financing and other threats to the integrity of the international financial system (www.fatf-gafi.org). 
g. 


+» Anti-Money Laundering / Anti-Terrorist Financing. 
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4. TO BE scenario 





The adoption of blockchain / DLT-based solutions could mitigate the 
identified process criticalities, with a potentially significant impact in 


two ways: 


1. replacement of applications and infrastructures 
made with traditional technologies without altering the operating 


processes (linear evolution); 


-FG obey reraing processes e 


introduction of completely new business models. 


JURISDICTION A 





The first case - for example - can be concretized in an architecture that 
allows to bring together the clearing and payment settlement 
operations, thus reducing the costs related to checking availability and 
the best payment conditions, as well as the number of intermediaries 
involved . There are already DLT-based solutions that make Cross 


Border Payments according to the architecture shown. 





i 
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INI si a ana 
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: 
: 
i SMEs ORIGINATING i BLOCKCHAIN RECIVING SMEs 
i FINANCIAL INSTITUTION i NETWORK GLOBAL FINANCIAL INSTITUTION 
! (OFI) i PAYMENT (RFI) 
! ! NETWORK 
A A y y 


Local Currency A> Digital Asset 


The PMI relies on a financial institution to make a payment in foreign currency, 
after opening an account with it. 


The Bank proceeds to issue on the blockchain network an amount of DA equal to the 
amount of the payment that must be made. 


Figure 15: Cross Border Payment model via DLT with linear evolution 
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| 


finalized, the amount will be made available to the final recipient. Digital Asset> Local Currency B 
country of arrival equal to the amount of DA made available on the network. Once the operations are 
The bank receiving the payment can then receive the credit of an amount of the currency of the 


However, these solutions now only allow to manage spot payments - 
such as the regulation of purchase invoices, limiting the spectrum of 
operations supported and not allowing, for example, the contextual 
management of liabilities and assets with underlying multiple accounts 


and multiple customers. 


For the purposes of this document, the working group found it useful to 
investigate case number two 

- modification of traditional processes within a renewed business 
context, trying to imagine scenarios in which the interactions between 


actors allow to create new market patterns. 


Bitcoin and other cryptocurrencies, which we can define as "open 
source" so, based on permissionless networks, they highlighted a series 
of critical issues that make their use as a rather problematic 
widespread payment instruments. The purchase and exchange of 
cryptocurrencies is not allowed or regulated in all jurisdictions and 
points remain open such as the absence of adequate information 
regarding the risks associated with cryptoactivity, money laundering 


with crypto-activity, etc. 


Of particular interest in the area of payments are the so-called Stable 
Coins s», or forms of Digital Asset issued and managed in order to 
maintain their value stable over time, thus making them potentially 
suitable for use as a payment instrument. This stability is generally 
guaranteed through a form of connection between the value of the DA 
and the value of one or more other assets, be they traditional (off 
chain: securities, currencies, raw materials ss etc.) or in turn digital (on 
chain: cryptocurrencies, other DA). The connection can be of two 


types: 


* pegged - The alignment of the values is obtained through the 
specific action of the DA issuer (e.g. increase or decrease in the 
volume of DA in circulation) or through the action of algorithms 


(this case is more theoretical than real); 


e collateralized - The issuer guarantees that a certain amount of 
traditional assets ss or digital are placed to guarantee the value of the 
issued DA. In the ideal case, the collateral is deposited with a 
custodian and the entire process is subjected to an external audit to 


guarantee the interested parties. 


so The term is not used only to qualify the underlying computer code, but the ways in which these cryptocurrencies are issued and exchanged. 
s As widely noted by the national and transnational institutions that have analyzed the phenomenon. See for example the European Bank Authority - “Report with advice for the European 


Commission on cryptoassets ", January 2019. 


s2 Even for Stable Coins there is no univocal definition, an attempt has been made to give a description oriented to clarity of understanding rather than formal correctness. 
ss An example of a Commodity-backed Stable Coin is the Venezuela Petro, which requires that the value be coupled to the market value of the Venezuelan barrel of oil. 
ss The Libra project proposed by Facebook adopts this model as it assumes that the value of the Libra currency is guaranteed by a reserve consisting of securities and funds. 
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In the coro foso: 46: a second subdivision can be To better illustrate the placement of Stable Coins in the context of the 


introduced: "coin" in a broad sense, reference can be made to the so-called 


Money Flower, which helps to classify coins according to four 
guaranteed convertibility: whoever issues the DA guarantees properties. 
their convertibility into currency at any time at the request of the 


holders; 


convertibility not guaranteed: the possibility of 
conversion of the DA into currency depends only on the availability 


of the participants in the specific ecosystem. 









Bank deposits 2 
Electronic money 


* Banknotes from 
USD 100,000 










Bank accounts 
CBDC 


(wholesale) 





Central 
(Retail) 


Payment toke: 
(wolesales) 







reserve and settlement 





CBDC 
(Retail) 





Commodity money Central * StableCoins 


@ oiciral 
* Payment Token (Retail) 


. i 
@ ISSUED BY CENTRAL BANK Cryptocurrencies 


@ WITH DIFFUSED ACCESSIBILITY 


o AUTONOMOUSLY REPRESENTATIVE OF VALUE 


Figure 16: Money Flower 
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The feature called "Autonomously representative of value" The new relationships that could be established between the actors 


(Value-based in the original) indicates that the transfer of ownership of involved in international payments denominated in currencies other 
the currency involves the simultaneous transfer of the value than the adoption of a new model based on the exchange of DA are 
represented, making possible a peer to peer exchange without the detailed in the logical model that follows ss. 
need for intermediaries ss. 

Stable FIG 1 classified as a subset of Payment 

Tokens and as such can have a "retail" (ie accessible to the general 

public) or "wholesale" connotation (circulation limited to a predefined 


set of subjects). 
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Figure 17: 


Cross Border Payment model via DLT and Stable Coin 


ss Intended as a financial intermediary, not as a technological operator. 
ss There are several case studies for the use of Stable Coin as a settlement tool for interbank payments also cross border. At central bank level, the project is examples 


Jasper led by Bank of Canada and Monetary Authority of Singapore and the Stella project developed by European Central Bank and Bank of Japan. 
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NIVHO-440 INOIZVIHTO 


NIVHO-NO INOIZVIHdO 


lt can be assumed that banks retain the role of "front end" towards end 
users, keeping the functions performed unaltered and safeguarding all 


regulatory compliance needs. 


The change would be at the back end level where the new DA-based 
system would replace the complex system consisting of correspondent 


banks and the international interconnection network. 


The transfer of value between the payer and the beneficiary would 


therefore follow this flow: 


1. Payment order (Off Chain) 
e Payment order arrangement (Payer) 
e Debit of the account of the Ordinant (Bank 


of the Ordinant); 


2. Conversion into Currency / DA (On Chain) 


e Conversion from local currency Jurisdiction A to Digital Asset 


» Transfer of the Digital Asset to the Beneficiary Bank 


e Conversion from Digital Asset to local currency Jurisdiction B; 


3. Payment delivery (Off Chain) 


e Credit to the Beneficiary's account (Bank of the Recipient). 


The execution of the On Chain operations must have a high degree of 
automation to avoid introducing delays in the overall process. In fact, 
the transition from the current scenario of the banks corresponding to 
that proposed in this document, will imply on the part of the actors 
involved an adaptation of the current operational processes to meet 
the needs of a blockchain architecture. The structures currently in 
charge of risk and liquidity management (financial institution side) may 
have increased their role, while the corporate functions involved in the 


management of payments may need 


sr Principle for Financial Market Infrastructures, Banks for International Settlement - CPSS IOSCO, 2012. 
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to upload and make available on blockchain the documentation and 


authorizations necessary to perform an operation. You 


It is clear that the level of process automation and the level of 
change and adaptation required will depend on the role that each actor 
will play within the ecosystem. This role - defined during an actor's 
onboarding process to the network - will also impact the contractual 
relationships that will regulate his money exchanges with the 
counterparties and the type of tasks that he can perform. The correct 
assignment of responsibilities in carrying out these operations is a 
topic to be explored, also in consideration of what is applicable in the 
Principles for Financial Market Infrastructure s, which, by way of 


example: 


e responsibility of the subjects authorized to issue the DAs towards 
the users of the system, including the correct management of the 


collateral placed to guarantee the value of the DAs themselves; 


+ responsibility for managing liquidity risk and ensuring correct 


finalization of payments; 


e responsibilities and charges of each of the subjects involved for the 


purpose of managing security risks and related countermeasures. 


To guarantee the necessary levels of security and governance, the 
underlying DLT platform must be of the permissioned type and, from 
an exclusively technological point of view, ideally exercised by a 
Network Operator. Access to the platform should also be guaranteed 
to one (or more) competent authorities with inspection and 


surveillance functions (Auditor). 


The subjects that carry out the "Currency -> DA" conversion are central 


to the ecosystem. They are responsible for: 


e collateral allocation; 


e issue of DAs; 


* monitoring the amount of DA in circulation in line with the collateral 


value; 


* management of exchange systems; 


e execution of currency payments to the banks of the beneficiaries. 


For simplicity of representation, they are described as a single logical 
entity, but in reality the two roles of issuing the DA and managing the 

exchange systems can be separated and the banks themselves could 
assume one or both roles, if possible in the jurisdictions to which they 


belong. 


Of particular relevance is the structure of the contractual relationships 
between all the parties involved. Having a transnational nature, this 
"ecosystem" will have to deal with the legal and regulatory system of 
the various jurisdictions and, where applicable, refer to universally 
recognized standards and practices, addressing all the peculiarities of 


transnational agreements ss. 


The "ideal" characteristics of the DA on which the model can be based 


can then be outlined: 


1. limited circulation (wholesale) - To reduce 
complexity and avoid impacts at local level, DAs must have limited 
accessibility to ecosystem participants and not accessible to end 


users; 


2. Convertibility guarantees - Must be guaranteed 
convertibility in local currency to complete the transfer of value to 
end users who do not have access to DAs. To this end, probably 


the best form of collateralization is with currency deposits; 


se Including, for example, the Authority to refer to for the resolution of any disputes. 


46 


3. multiplicity of issuers - To ensure liquidity 
of the DAs and consequently reduce risks it is appropriate that 
there are more than one qualified persons authorized to issue 


DAs. 


Another point of attention is the accounting and tax treatment of these 
DAs, which could vary significantly depending on the jurisdictions in 


which the different actors operate and their nature. 


Guaranteed the possibility of issuing a Stable Coin on the market that 
meets the ideal characteristics of a DA as previously defined, the 
benefits that can arise from the adoption of these new financial 
instruments can go beyond the increase in effectiveness and the 
simplification of business processes payment management. Indeed, 
lower margins may be joined by higher margins made available to 
financial institutions by the increase in the types of services they can 
offer their customers. In fact, one can imagine that the types of 
operations enabled by the new network will go beyond simple 


payment, for example extending to the loan. 


The need to manage liabilities and assets and no longer only 
conversions between currencies and Stable Coin would require 
participants to enter into contracts that regulate the timing, 
authorization and management of disputes. From a technological point 
of view, this implies designing a blockchain solution that allows to 
include the execution of Smart Contract at each transaction. 
Furthermore, the possibility of handling large sums of money in the 
billions of dollars should be envisaged. From the point of view of the 
actors involved, in the blockchain-enabled scenario described herein, 
banks or other types of financial institutions could take on the role - if 


not a Issuer of a DA - of Liquidity Provider, 


5. Ecosystem and expected benefits 





The analysis of the use case related to international payments has 
revealed the need to complete the services currently offered by 
blockchain in the field of international and interbank payments with 
new offers. On the one hand, it is requested to deepen the role that 
financial institutions such as CDP - Cassa Depositi e Prestiti - in Italy, 
CDC - Caisse des dépóts et consignations - in France, ICO - Istituto 
de Credito Oficial - in Spain and KFW - Kreditanstalt fùr Wiederaufbau 
("Credit Institute for Reconstruction") in Germany, they can hold to 
enable companies to access Digital Asset that simplify their payments 
abroad. Even more robust could be the solution of an adhesion of all 
European Banks to the same blockchain circuit, i.e. a connection 
between the blockchain circuits to which the individual European 
Banks belong, which could become a standard and a liquid instrument 
thanks to the presence of high standing actors. On the other hand, 
students are asked to understand how to integrate a possible new 


blockchain-based payment system with those currently available. 


Although the gain in efficiency and traceability of banking transactions 
guaranteed by the introduction of a Stable Coin for the execution of 
cross border payments is evident and recognized also by the 
competent authorities ss, the need to operate at a transnational (ie pan 
European) and / or international level raises important requirements to 
be met to ensure that the adoption of digital forms of payment based 
on DLT or cryptocurrencies do not affect the stability of the current 
financial system and sovereignty national in the management of 
financial policies so. For example, Libra's (Facebook) attempt to 


introduce a private stable coin could lead to competition with 


se "Investigating the impact of global stablecoins" - G7 working Group on stablecoins, October 2019. 


the various national currencies such as to render the economic 
environment more unstable (for example, an increase in volatility due 
to changes in the portfolio of the assets / currencies on which Libra is 
based - pegged). On the contrary, the hope is to go in the direction of 
a "Programmable European Stable Coin", trying to coordinate the 
public and private sphere, so as to ensure that tools such as the 
regulation of exchange rates or interest rates continue to be available 


to regulators in case of need. 


It is therefore evident that in this context not only private banks, but 
also Central Banks will play a fundamental role in regulating the 
adoption and use of DLT-based Stable Coins. In this regard, it should 
be noted that there is a particular type of DA, technically similar to 
Stable Coins, called Central Bank Digital Currency (CBDC). Èssa is 
defined as: “a digital form of Central Bank money other than balances 
in traditional reserve or settlement accounts s: ". Therefore, being a new 
method of issuing fiat money alongside the existing ones (cash and 
Central Bank accounts), its value and convertibility are guaranteed by 
definition. Although at the time of writing this document there are no 
examples of CBDC made available to the general consumer, the 
attention on the matter has significantly increased and significant 


developments can be expected in the medium term. 


so "German banks say: The economy needs a programmable digital euro!", Association of German Banks (Bankenverband), October 2019. 
ss Different definitions of CBDC can be found. The definition of the CPMI - Market Committee of the Bank for International Settlements was adopted here. 
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In a survey published in January 2019 by the Bank for International 
Settlements «zit was found that about 70% of the Central Banks 
interviewed are in some way committed to the issue, even if the 
percentage that considers the introduction of a CBDC possible in the 


medium term is less than 40% ss. 


On the other hand, the first document produced on Stable Coins by 
the working group set up by the G7 «reports that central banks will 
analyze, individually and collectively, the appropriateness of issuing 
CBDC according to the costs and benefits in their respective 


jurisdictions. 


It is therefore clear that the proposed analysis and solution go in the 
direction of adopting models of evolutionary discontinuity, which allow 
to increase the number and type of actors participating in 
blockchain-based networks and to increase the type of financial 


operations that can be carried out . 


s:"Proceeding with caution - a survey on central bank digital currency". 
ss Central Banks and legislators will face potential social implications on national banking systems. 
«G7 Working Group on Stablecoins - "Investigating the impact of global stablecoins", October 2019. 
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1. Introduction 





This section analyzes the case in which a company, an institution, an 
institution decides to resort to the issue of bonds on the capital market 
as an alternative source to traditional financing through the banking 
channel. Particular attention will be paid to the description of the typical 
bond issue process (hereinafter the AS IS process), the actors involved 
and their role, trying to analyze whether and how it is possible to 


facilitate access and use of this financing. 


The following considerations and analyzes refer to two possible 


scenarios: 


1. the issuer has an established emissions program 


and can be considered a" frequent issuer" ss; 


2. the issuer does not have an issuance program in 


be and want to start a single bond issue (* stand alone ") Or set up a 


new emissions program. 


Where relevant, the description of the use case will be integrated with 
evidence that allows the case under examination to be generalized to both 
scenarios, with particular reference to the reality of Small and Medium-sized 
Enterprises (SMEs) and / or those companies that do not fall within the 


category of " frequent issuer". 


The absence of internal structures in charge and the costs to be 
incurred for the launch of single issues or for the creation of an 
emissions program are currently deterrents for SMEs to look at the 
bond market as a source of financing. CONSOB has recently made 
changes to the Capital Raising Regulations online, in order to make 
available to all SMEs ( startup, Innovative and non-innovative SMEs) a 
wider variety of financial instruments through which to raise funds. The 


instruments 


of debt to which the amendments to the aforementioned Regulation to 
be issued by SMEs refer are represented by the so-called "MiniBonds", 
introduced in recent years with the aim of facilitating access to credit by 


Italian SMES ss. 


Given that the market is interested and open to the use of new forms of 
access to finance by businesses - research shows that the percentage 
of corporate debt financed on the debt market has gone from 5.9% in 


2007 to 


13.4% in 2017 «7, the following paragraph seeks to analyze the AS IS 
process, highlighting any improvement points through innovative 
solutions based on the use of blockchain technology. We therefore 
want to provide a discussion contribution to guide the design of 


technological solutions adapted to the needs of businesses. 


ss Frequent issuer is defined as that issuer which regularly uses the capital market as a source of financing and who has therefore set up one or more issuance programs. 


se http://www.consob.it/web/area-pubblica/bollettino/documenti/bollettino2019/d21110.htm 


s "The Italian corporate bond market: what is happening to the capital structure of Italian non-financial companies?" - Stefano Caselli, Carlo Chiarella, Stefano Gatti and Gimede Gigante - Baffi 


Carefin, Bocconi University, 2018. 
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2. AS IS scenario 





PRE LAUNCH BOOK BUILDING 


Figure 18: Bond issue process steps 


This paragraph describes the stages of the process that should follow 
the company / institution / institution that wants to appear on the capital 
market and, therefore, wants to launch a bond issue. It should be noted 
that this process - outlined in figure 18 - refers to an issue carried out 
on an emissions program, a scenario which presents more complexity 
than a stand alone issue and which, as such, best lends itself to 
identifying possible critical issues. The first phase - called in this 
document "pre launch" - is represented above all by the predisposition 


(or by the updating, in the 


case 
of already established issuance programs) of the documentation from 


which the issue will be made. 


The establishment of an emissions program, as well as a single 
so-called issue stand alone, 

involves a series of activities, which are very often costly and time 
consuming, which require the contribution and collaboration of multiple 
corporate areas (Finance, Legal, Compliance, etc.), as well as the 
intervention of external legal consultants who assist, on the one hand, 
the issuer, and on the other the placement banks of the securities 


bonds (so-called banks Dealer). 


Among these activities, for example, the preparation of a Prospectus 
should be noted s, the approval of the same by the competent Authority, 


the stipulation of a Agency 


Fal > 


SETTLEMENT POST-EMISSION 
AND MANAGEMENT 
CLEARING 


Agreement with the Paying and the Listing Agents and a 

Dealer Agreement with all Program Dealer banks. The Terms and 
Conditions (T&C) contained in the Prospectus represent the main 
terms that will govern all future bond issues of the issuer (in the case of 
issues under the Program) and the single stand alone issue, which 


may have only the characteristics (for example, duration, currency, 


pay-off) indicated in the aforementioned T&C. In addition, the 
Prospectus generally also reports the financial data of the Issuer, as 
well as a description of the activities carried out and the corporate 
structure. If, however, the issuer already has an emissions program in 
place» once a year, on the occasion of the annual expiration of the 
validity of the Prospectus, the issuer will have to update it, which must 
therefore be approved by the competent Authority (for example, in Italy, 
Consob, and in Luxembourg, the "Commission de Surveillance du 
Secteur Financier"). With regard to the cases of establishment of an 
Issue Program, it should also be noted that, during the annual validity 
of the Prospectus, in the event that significant events have occurred or 
financial data or information not incorporated in this document has 
been disclosed, the issuer will proceed with the publication of a 
supplement to the Prospectus, which will also be approved by the 


competent Authority. 


68 Typically, in the Euromarket it is a Base Prospectus, while in the domestic market the offer documentation includes a Registration Document and a Base Prospectus. 69 The Paying Agent is the subject to which the issuer, for each issue made 


under an Issue Program or even in the case of a stand-alone issue, transfers the funds necessary to 


payment of periodic coupons or repayment of the principal at maturity to the various holders of the security, usually through a Central Securities Depository (CSD). In Italy, the centralized deposit system service is provided by Monte Titoli. The Listing Agent 
deals with the admission to listing of the securities issued on the reference stock exchange. The Agency Agreement is the agreement that governs the relationship between the Paying Agent and the issuer. 


70 The agreement regulating the relationship between the issuer and the banks acting as Dealer, not necessary in stand alone issues. 
71 The company, entity or institution that wishes to issue a bond for the first time will be able to evaluate the opportunity to create a special program only if it provides for a certain frequency 


in the issue. 
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Figure 19: Pre launch phase model 
In this preliminary phase, the eventual also falls of roadshow external lawyers also review the /nvestor Presentation to 
roadshow normally carried out in the main European financial centers verify that all the elements contained in it are incorporated in the 
and conducted by the issuer for the presentation of the new potential Prospectus, on the date of the last update, or Supplement. As regards 
transaction to investors ( deal related roadshow). In other cases, the Dealer banks, or rather, the group of banks selected to accompany the 
issuer may opt for a net roadshow, which does not provide for the issuer on the market on the occasion of the new transaction, they will 
physical presence of representatives of the issuer with the investors, receive a "Management and underwriting fee" 
but only the upload of the /nvestor Presentation on your site. At the end 
of this preliminary phase of activity, in view of the launch of the new 
operation, the issuer starts drafting a first one draft of the at the end of the transaction, the amount of which will be established within 
documentation (for example, draft of the Termsheetwhich summarizes the Subscription Agreement signed between the Issuer and Dealers. 


the terms and conditions of the transaction). 


During this phase, the issuer must bear management costs, in the 
form of various fees, paid to the actors involved in the process. One of 
these, if any, is the external law firm that assists the issuer in setting 
up and / or updating the emissions program and / or in preparing the 


documentation relating to the individual issue. In case 
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Figure 20: Bookbuilding stage model 


The second phase - referred to in this document “ Bookbuilding & 

Pricing "- starts immediately after the announcement of the launch of 

the operation on the market. During the phase of bookbuilding 72 investors 
send their subscription orders to the banks Dealer involved in the 
operation. The issuer, through a specific platform made available by 


banks Dealer, has the ability to monitor the progress of the book. 


At the end of the books, the share is distributed (the "allocation") 


between the various subscribers and the Pricing of the title 73. 


Subsequently, the documentation related to the issue is drawn up, 
including i Fina/ Terms ( not in case of emissions sfand alone, as the 
terms and conditions of the issue are already included in the 


Prospectus) and the Subscription Agreement (ie, the securities 


underwriting contract concluded between the issuer and the banks Dealer). 


In the case of a stand alone issue, the documentation to be produced 
varies, as, for example, it will not be necessary to prepare ad hoc Final 


Terms or sign a Dealer Agreement. 


In the case of issue programs on which the agencies in charge have 
issued a rating, the documentation is shared with the latter in order to 


issue rating letters on the specific issue. 


through a special of the allocation and pricing 
Chksifobiwok clositig 
Gs] v) 
CHECK BOOK ISSUER 
THROUGH 
PLATFORM 


The third phase is substantiated in the regulation ( "Settlement"”) 

of the security and may be made by the issuer itself or more 
commonly by an agent on behalf of the issuer. This is because the 
latter does not always have direct access to the market or to the 
issuance procedures. These procedures can be schematized as 


follows: 


1. request of ISIN code to Bank of Italy. This code 
it uniquely identifies the security and is necessary if it has to be 


centralized with a CSD - Central Securities Depository; 


2. Common Code request (optional) required 
if the security must be centralized on foreign platforms such as 
Euroclear or Clearstream. It has the same function as the Isin 


code; 


3. centralization, or census at the 
master data of a CSD (e.g., Monte Titoli). This activity is 
mandatory where the cases mentioned in this document are 


verified (listed security, widespread circulation, issue above 


150,000, etc.). This phase consists in communicating the 
characteristics of the security to the CSD (nature, duration, rate 


type, structure type, presence of derivatives, nominal, etc.); 


72 Only for public issues. In the case of private placements and, therefore, of transactions concluded between the issuer and the subscriber of the security, this phase is effectively reduced to a negotiation 


bilateral which leads to the definition of the Terms & Conditions of the security. 


73 For example, definition of the coupon or the price of the security, taking into account a series of variables including market conditions, the maximum premium that the issuer wants to grant in relation to the 
title taken as reference ( Benchmark) the performance on the secondary market of securities already issued by the issuer itself or by comparable issuers. 
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4. settlement, the latter stage usually takes place for 
via telematics on the platform. The tool with which this activity is 
carried FIG? Prepeiver versus Payment. This 
method takes the form of the simultaneous exchange of the 
security and the equivalent through the intermediation of the CSD 
itself. In this way the counterparty risk is eliminated. The DvP is by 
nature a contractual agreement which commits the two parties to 
its regulation except for the cancellation of the deal, which must be 
bilateral. As long as the security is not fully delivered or the money 


fully paid, the transaction will not 





can define completed. There are penalties applied by the CSD for 
failure to deliver the security or equivalent. The exchange of the 
security on the platform with payment of the consideration to a 
bank account (FOP - free of payment method) is instead residual. 
This case does not affect the reduction of counterparty risk, which 


is why it is rarely used; 


5. parallel and optionally can be 
other activities such as the listing of the security itself on a 


regulated market. 


CSD (DvP PROVIDER) 
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Figure 21: Settlement phase model 
The “FT Catled i cument "Post-issue management" - be carried out by the same issuer or by a third party (for example the 
concernsS"all tfos iviti out after the issue, such as, for Paying Agent). The funds necessary for the payment of the coupons, 
example, the payment of periodic coupons and the repayment of the as well as, upon maturity of the security, for the repayment of the 
principal at maturity. The calculation of the coupon amount, to be paid capital, pass through an account opened by the issuer to the Paying 
periodically to investors, is carried out by the Calculation Agent, a role Agent, which makes them available to the CSD which makes the 
it can payment in favor of the holders of the title. 
Funds available on Liquidity made 
0 account a, available a Coupon payment Sey ` 
| 4 | i III j | III i eve | 
© © © 
ISSUER PAYING AGENT * CSD INVESTORS 


Figure 22: Coupon Payment Model, during the post-issue Management phase 


* Or generic financial intermediary. 
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3. Identification of critical issues and improvement requirements 





The bond issue process outlined in the previous paragraphs presents 
room for improvement, not only to improve its efficiency, but also to 
make access to bond-type financing instruments accessible to a wider 


audience. 


In particular, as regards the activities included in the pre-launch phase, 
given the large number of actors involved, a first source of 
inefficiencies is represented by the need to manage the contents and 
changes to the e-mail and / or non-collaborative tools documentation 
carried out by the various parties. First of all, the BoD - Board of 


Directors 


- has the task of authorizing the creation and / or updating of the 
emissions program. Once this approval is obtained, the sections of 
which the Prospectus is made up must be drawn up, read and 
validated by different types of actors within the same organization. The 
Prospectus is, in fact, shared internally with all the Organizational 
Units involved in its drafting and / or updating, with the support of an 
external law firm. Furthermore, since the financial data relating to the 
Company are contained, the Prospectus is also reviewed by the 
Auditors. Before the final filing, the Prospectus is deposited with the 
Competent Authority (for example, CONSOB only in the case of a 
domestic issuance program or CSSF as reported in the previous 
pages), which can also provide comments and suggest proposed 


changes. 
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verification of the same, making it accessible to all actors in a simple 
way and, possibly, guaranteeing and certifying the validity of the 
documentation provided by the organizations in charge. At the same 
time, the coordination action necessary for the preparation of 
documents, as well as the management of changes and versioning, 
are all operations made available by collaboration software that are 


more suitable for the purpose than DLT technologies. 


For companies that undertake this process for the first time, even the 
use of reference templates could have the advantage of reducing the 
time and costs of collecting and preparing the necessary 
documentation. Furthermore, it could have a positive impact on the 
cost incurred by the company towards law firms or professionals who 
offer consultancy services to companies in this sector. The presence 
of financial intermediaries (dealer banks) in the process involves a 
high cost from the point of view of fees to be paid and could represent 


a limit for SMEs that want to approach this market. 


During the phase of settlement, the intervention of the CSD is required 
by law in the event that the issue relates, inter alia, to debt securities: 
(i) regulated by Italian law admitted to trading or traded in an Italian or 
other trading venue of the 'European Union; (ii) whose issuer has 


others 


financial instruments listed on Italian regulated markets, or rather to be 
considered widespread; and (iii) for which the issue amount exceeds € 
150 million. Of particular interest is the possibility of automating the 
settlement process, which is currently taking place, among other 
methods, through DvP. Borsa Italiana defines DvP as a" Settlement 
method for transactions on financial instruments which ensures the 
contextuality between the delivery of the securities and the payment of 


the relative value" ra. 


The liquidation and settlement of transactions 


4. TO BE scenario 





Three of the four major problems identified are particularly suitable for 


a possible transition towards DLT-type architectures. 


The DLTs allow the decentralization and simplification of the control 
activities on exchange operations carried out within the ecosystem, 
thus reducing the role of the intermediaries who are currently in charge 


- centrally - of the management and execution of the transactions. 


The issue of bonds can in fact be schematized as an exchange of 


assets of different nature - securities in exchange for current money 


- between two or more actors. The bond is configured as a Digital 
Asset (or Security Token according to the classification proposed in 
figure 3). In this regard, the currently most interesting reference model 
is the ERC 14007, designed for use cases of financial assets based on 
various tokens. This model allows the introduction of rules in digital 
asset transfers, increasing their controllability, also for compliance 


purposes, such as: 


x https://www.borsaitaliana.it/borsa/glossario/delivery-versus-payment.html 
75 In Italy, Monte Titoli. 
7s Security Token Standard. 
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take place on the accounts (in securities and cash) that intermediaries 
hold with a central depository, the CSD platforms zs, which carries out 
the operation by means of specific accounting records. In this way, the 
exchange of securities takes place in total transparency and security, 
eliminating the counterparty risk. In fact, if the counterparty does not 
have the security, the transaction is not settled and the payment is not 
made; conversely, if you do not have the money for the payment, the 


security is not transferred. 


e Performing granular checks on transfers. 


e Association of legal documents hash digital assets, thus creating 
the connection between a 


blockchain transaction and the real world. 


e Ability to force the transfer of digital assets by a supervisory 


authority. 


The transparency and traceability that distinguish the DLTs make it 
possible to make the passages of ownership of the assets - and 
therefore of the Security Tokens - visible and known, guaranteeing the 
issuer to know at all times not only where the securities issued in the 
primary market have been placed, but also in the secondary market. A 


theme already introduced previously and which also applies in this 


area is that represented by the privacy of the actors. DLT type permissioned 


they guarantee to satisfy the confidentiality constraints, allowing not to 
make sensitive information public to the whole network and to 
segregate access to the rest of the data to the only nodes that are 


authorized. 


A deepening of the regulatory constraints on how much and what 
information buyers must share with their sellers and vice versa could 
help in the design of a final technological solution that allows to satisfy 
both the confidentiality and transparency requirements that emerged 


as critical by the issuer . 


Being able to monitor the exact placement of your securities at any 
time allows the issuer to manage its portfolio better, but also to be able 
to check whether all the compliance and respect for legal constraints 
have been respected. Especially in the case of bonds, there are legal 


restrictions on the types of investors who can trade them. You 


generally the task of those who place i 
securities on the market - and therefore of the Dealer banks - to 
ensure that these rules are applied. However, control operations can 
be more complicated as the depth of the network of investors 
increases (consecutive sales levels): include a detailed description of 
these constraints within the contracts between the parties - 
Subscription Agreement, Final Terms, etc. - and automating their 
verification at the time of asset transfer would make it possible to 
guarantee all parties involved greater security regarding the correct 
functioning of the market. There are in particular two issues that are 
worth investigating on this aspect. On the one hand, the literature on i 
is expanding Trusted Smart Contract - precisely "reliable" contracts; on 
the other, possible technological solutions are being explored to 
transfer the execution of DvP payments to DLT. Together, these 
solutions would make it possible to respond to the need described 
above to free themselves from the presence of figures of 
intermediaries - such as Dealer banks - who could see the changed 
role, being able to play a consultancy and knowledge-sharing service 


in the TO scenario. 
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1. Another possibility of using technology 
DLT is a transition from the presence of entities responsible for the 
management of DvP (such as Central Securities Depositories, CSD) to 
a scenario in which c/earing is 
settlement of operations are managed on Blockchain. However, the 
DvP has characteristics that do not make it comparable to a simple 
payment transaction (for example a bank transfer) or to the issue 
of the shares of the counterparties. Although the use of separate 
ledgers makes this configuration more flexible, there would be the 
need to ensure coordination between the parties or the 
introduction of intermediaries that regulate this connection, thus 
making this scenario less innovative compared to the AS IS 


situation; 


2. the traded assets reside on separate ledgers, whose 
alignment is guaranteed by automated functions. This 
configuration includes the solutions that go under the name of 
Hashed Timelock Contract (HTLC) and which were initially 
introduced to safely implement atomic swap mechanisms, i.e. the 
contextual exchange between the parts of Digital Asset without the 
need for an intermediary . HTLCs are based on the use of a hash 
function - a code - and a timeout function. The hash function 
allows you to generate a unique transaction key that the bond 
issuer provides to the investor to "collect" the security. The key is 
shared only after the bondholder has collected the amount of 
money that the investor had to pay, allowing the investor to 


acquire the bond. 


e 
e 


ISSUER INVESTOR ISSUER 


Ledger A 





Figure 23: Possible DvP solutions on blockchain 


Finally, whatever the technological solution adopted in a TO BÈ 
scenario, it must take into account not only the typical risks of these 
contexts (main risk, replacement cost, liquidity risk), but also those 


specific to DLT infrastructures, namely: 


1. The presence of a regulatory framework in progress, not 


still defined and therefore subject to change; 


2. The absence of entities / institutions that fill the role 


of Custodian of Digital Assets within the business network; 


3. liquidity risk: one of the two counterparts yes 
finds he does not have enough resources to complete the 


transaction. 


A further constraint that it is important to mention about the possibility 
of adopting DLT for the execution of DvP payments is that the security 
in question is listed or not. Indeed, current regulations provide that, for 
listed securities, the presence of CSD entities is mandatory, in the role 
of settlement executor, custodian and register. However, a possible 
modification and updating of the current laws could go in the direction 
of making it possible to use blockchain-type technologies in this sense, 
reducing the number of intermediaries and therefore the cost for the 
execution of this type of payments. In the scenario in which the use of 
DLT allows the network to free itself from the intermediation of 
CSD-type entities, a further constraint to be satisfied would be to be 


able to make visible to the issuer who 
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are the holders of the bonds issued. In the current scenario, in fact, 
this information is not directly available from the issuer itself, but the 
CSD is the custodian, and it will therefore be necessary to provide for 
a mechanism for visibility and transparency of the network that 


continues to guarantee the traceability of this information. 


5. Ecosystem and expected 


benefits 





In conclusion, in the TO BÉ scenario outlined, phases of the current 
process have been identified that could benefit from an increase in 
efficiency of the activities carried out both off-chain - i.e. the digitization 
of the process of preparing the initial documentation - and thanks to 
the adoption of blockchain , such as settlement activity. It is evident 
from the foregoing that the level of innovation of the process 
introduced by the use of DLT can vary according to the technological 
solution adopted, especially as regards DvP payments. The ability to 
perform inter chain transactions is linked to interoperability issues, 
which today represent an open and development point for DLT-based 


applications. Flexibility and openness to participation, 


Final thoughts 


Until now, the potential offered by distributed ledger technologies has 
been described, ranging from increasing confidence to reducing costs 
to reducing the number of intermediaries participating in a transaction, 
the tools that distinguish the functioning of these networks have been 


characterized 


- Digital Asset and Smart Contract - and some of the types of DLT that 
can be adopted - permissioned (public and private) and 

permissionless - have been defined. Once the technical characteristics 
of these technologies have been identified, their application to 
concrete use cases has raised the presence of points of attention on 
which further progress must be made before a truly pervasive use can 
be reached. Taking a cue, for example, from what has been 
highlighted by the Bank of Italy 77, the preconditions for extensive use of 


blockchain / DLT in the financial system are: 


e technological and governance robustness; 
e interoperability; 
e scalability; 


* controllability by the operator and, where necessary, by the 


regulator. 


7 Economic and Financial Matters - Economic and Regulatory Aspects of Cryptocurrencies, March 2019. 
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The first point introduces what is called the "paradox of trust". There va/ue 
proposition of the DLT highlights the possibility of enabling business 
relationships in which there is a low level of trust between the parties 
involved. The paradox is that it is technology itself, in many cases, that 

is not perceived as reliable enough for real applications. From the 

point of view strictly linked to the DLT platforms, it must be said that 

the progress has been remarkable in terms of stability and reliability, 

also given the important investments in this sense by the main 
technology suppliers. Also with regard to scalability, the performance 


of the latest solutions 


business oriented are reaching appropriate levels. Another aspect is 
the implementation model. DLT solutions are primarily designed to be 
distributed infrastructures, where the geographical dispersion of the 
nodes also contributes to the overall resilience of the system. It is 
therefore essential that all the subjects that host the nodes can 
guarantee the same service levels and the same technological 
competence. Particularly delicate in this sense is the management of 
the elements responsible for implementing the consensus and 
validation logics. In an ecosystem in which highly uneven subjects 
participate, also in terms of specific technical competence, it can be 


difficult to guarantee these conditions. governance. 
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Figure 24: Governance in centralized and decentralized processes 
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In reality, addressing these aspects poses a series of radically new 


efficiency and transparency needs, a model is needed governance "Participatopyúblems, also at a legal and contractual level since the paradigms 


which must be carefully constructed with particular attention to: 


e correct and clear definition of the roles and responsibilities of the 
subjects participating in the governance and operational 


management of infrastructures and applications; 


* robustness of decision-making processes, in particular as regards 
risk management and management of incident and crisis 


situations; 


e effectiveness of the processes for managing changes to the agreements 
between the parties and changes in the structure of the network, with 
particular attention to the entry 
and above all, the exit of a participant does not have negative effects 


on the continuity of the service 7s. 


underlying a DLT solution can be substantially different compared to 
traditional models. From the model of governance the correct 
relationship with regulatory and supervisory bodies depends, which 
must be able to have an interlocutor with whom to discuss the 
compliance requirements, in the manner and according to the 
regulations applicable from time to time. From a pure technological 
point of view, DLT solutions allow supervisory bodies to access the 
network (node with auditor role) but this possibility, while being able to 
facilitate the body's activities, does not solve the problem with respect 
to the assumption of responsibility by the participants to the network. 
On the problem of interoperability among DLT platforms, the attention 
of many subjects is focusing, both private companies that focus on the 
development and marketing of interoperability solutions, and 


regulators and standardization bodies 7». 


7 What is reported is inspired by: Bank for International Settlements, CPMI - "Distributed ledger technology in payment, clearing and settlement", February 2017. 
7 The Working Group SG 7 Interoperability of blockchain and distributed ledger technology systems is active within the ISO Technical Committee 305 Blockchain and distributed ledger technologies. 
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Other issues that need to be addressed include the exchange of digital 
assets between different blockchains 

- in such a way as to guarantee its non-duplicability - and the univocal 
association with an identity. In this regard, it is also to be considered 
that the guarantee of a unique identity through different DLTs must not 
ignore the fulfillment of the privacy protection rules such as GDPR in 
Europe - for example by providing technological solutions based on 


the pseudonymisation 


(ie privacy by design) that allow not to make personal information 
available to the network, except in the measures and forms (ie 
protected by encryption) necessary for the proper functioning of the 
network. 

The availability of efficient interoperability solutions would also allow 
the coexistence of multiple DLT platforms that address similar 
business needs, avoiding risks of excessive concentration and 
allowing the development of specialized solutions that can be 


integrated into larger ecosystems. 


The theme of interoperability is to be understood not only between 
different value chains, but also between current and new DLT 
infrastructures and systems. This is also due to the absence of 
complete and shared regulatory frameworks that give support in the 
disambiguation of borderline cases or disputes and which govern the 
attributes of the Digital Assets exchanged on the network against, for 
example, current money. VAT liability, 

there 
management of the yields of deposits of DA and the like are open 
issues that at the same time as interoperability place the emphasis on 
the need to define an adoption plan for the use of the DAs that does not 


affect the stability of the markets. 


As far as the manager's controllability is concerned, it presupposes 
primarily the existence of a manager, and therefore relates to the 
theme of the governance structure and the robustness of the related 
processes. Much broader, however, is the issue of controllability by 
the regulator, where this term must include both the bodies 
responsible for issuing the reference legislation and the bodies 
responsible for supervisory activities, where the two do not coincide. 
The regulatory body is faced with the need to adapt and interpret 
existing rules or formulate new ones suitable for new paradigms; so 


that all actors can refer to a sufficiently stable framework. 


The supervisory body faces an opportunity and a challenge at the 
same time. The first derives from the possibility for the institution to be 
part of the system (concept of "auditor" node). The supervisory body is 
obviously not an active part in the operation of the service / market, 
but the possibility of implementing continuous monitoring of the data in 
their "native" form could have a positive effect on the reduction of the 
compliance costs to which they are subject financial operators. On the 
other hand, this entails the need for the body to acquire the specific 
technological know-how in addition to the willingness to modify its 
operating methods also in a substantial way. Attention to this concept 
of" embedded supervision ”\s growing with national and multinational 


bodies so. 


so See for example: Bank for International Settlement - Embedded supervision: how to build regulation into blockchain finance, September 2019. 
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Conclusions 


The analysis of the characteristics of the blockchains / DLT and the 
examination of some possible use cases in the financial sector have 
highlighted the innovative potential that the diffusion of these solutions 
could have in terms of redefining business processes. The growing 
use of distributed ledger technologies, in fact, represents an 
extraordinary opportunity to design innovative ways of managing 
activities with important positive effects in terms of times, costs and 
advantages connected with the possibility of decentralizing and 


automating certain operating phases. 


Furthermore, through the consolidation of the platforms and the 
development of the applications, it is possible to imagine the 
progressive expansion of the field of action by making new services 
accessible to an ever wider audience of end users. The analysis of 
cross-border payments, for example, has highlighted how, through the 
use of the blockchain, not only large companies but also small 
businesses can benefit from the simplification and potential 
containment of the costs of managing foreign trade relations and 


medium size. 


In this context, therefore, the DLTs open a significant space for the 
Italian entrepreneurial fabric characterized mainly by SMEs, which 
could increasingly benefit from a technological ecosystem conducive 
to the adoption of safer and more efficient financing methods. At the 
same time, the development of the provision of financial services 
through the most advanced technologies will require the creation of 
new qualified and specialized professional figures, who can guide first 


and then manage the adoption of these new business models. 


However, in order for this scenario to acquire concreteness and 
consolidation, it is necessary that the debate matures on the critical 
issues to be resolved in relation to governance, interoperability, 
scalability and regulation, to create an organic and stable framework 


within which to promote blockchain / DLT applications. 


Informative note 


Main Technologies 


This work does not focus on examining the plurality of blockchain technologies and platforms available on the market; by way of example, the main and most widespread 


experiences are cited, with definition and main references in the notes. 


* Permissionless blockchain 


* Bitcoin.: Bitcoin is a cryptocurrency and a worldwide payment system created in 2009 by an anonymous inventor, known under the pseudonym of Satoshi Nal 


convention, if the term Bitcoin is used with the capital initial refers to technology and the network, while if lowercase (bitcoin) refers to the currency itself. 


+ Ethereum:: Ethereum is a programmable blockchain, it has a native cryptocurrency called Ether (ETH) which takes advantage of the benefits of cryptocurrencies and blockchain 


technology. 


* Blockchain permissioned 


+ Hyperledger Fabrics: Hyperledger is an open source and collaboratively managed blockchain technology created with an intersectoral focus. It is a global collaboration, 


hosted by The Linux Foundation, which includes leaders in the financial, banking, Internet of Things, supply chain, production and technology sectors. 


* Rope« blockchain platform developed by the R3 network (a network of 200 between banks, financial institutions, regulatory bodies, associations and technology companies), 


focused on applications in the finance sector. 


+ Ethereum Enterprises Enterprise Ethereum refers to private, consortium and hybrid implementations based on Èthereum for business applications. Ethereum's blockchain 


technology allows organizations to create, test and distribute decentralized applications. 


1 https://bitcoin.org/ 2 https://ethereum.org/ 
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a https://www.hyperledger.org/ 


« https://www.corda.net/ s https://entethalliance.org/ 


Acknowledgments 


This document is the result of joint work and analyzes carried out and shared by a large and interdisciplinary working group. 


Thanks to the team composed of: 


CDP - Andrea Catania ( /CT Infrastructure Systems), Carmela Solimeno ( Liquidity) Angela Mancone ( Debt Capital Markets), Alessandra Amati ( Anti-Mo, 


Laundering), Luca Commentucci ( Compliance) 

BE - Daniele lanni ( Senior Business Architect), Massimiliano Nava ( Payment Systems Product Manager), 

Alessandro Roveda ( Senior Product Manager Capital! Market), Giancarlo Sfolcini ( Senior Product Manager Digital Innovation) 

IBM - Loredana Chianelli ( Associate Partner), Daniele Langiu ( Managing Consultant), Giulia Plotti ( Consultant), 

Camilla Valle ( Consultant) 

We thank the technical contributors in the people of: 

CDP - Christian Grassi, Riccardo Fiorese, Matteo Barni, Francesco De Prosperis, Alessandro Gargiuli, Daniela Curcio, Eugenio Ceroni, Marcella Cola, 
Stefano Scaroina, Luca Spagnoli, Alessandro Marino, Sergio D'Asaro, Emanuele Rabuffi, Chiara Brunamonti, Ambrogio Alfonso, Sebastiano 
Gennaro, Alberto Carriero 

BE - Augusto Astesiano, Francesco Lanza, Mattia Ozzello 

IBM - Eugenio Cervetto, Carlo Ferrarini, Davide Girompini, Fabio Malosio, Francesco Melcarne 

Promoters: 

Guido Emiliano Doveri (Head of Public Sector Division - SIA) Marco Gaeta 

(Head of ICT - CDP) 


Nicola Losito (Vice President, SME and TSP - IBM Europe) 


Pietro Lanza (General Manager Intesa Spa (IBM Group) & Blockchain Director - IBM Italy) 


63 










cdp 


Investiamo nel domani 


